ProjectSegfault/invidious-experimenting
4
0
Fork 0
forked from midou/invidious
Code Pull Requests Activity

Escape item titles in search page

Browse Source
This commit is contained in:
Omar Roth 2020-03-04 13:03:14 -05:00
parent 0d536d11e3
commit 9dc4f8a1aa
No known key found for this signature in database
GPG Key ID: B8254FB7EC3D37F2
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/invidious/views/components/item.ecr
View File

@ -44,7 +44,7 @@
<% end %> <% end %>
</div> </div>
<% end %> <% end %>
<p><%= item.title %></p> <p><%= HTML.escape(item.title) %></p>
</a> </a>
<p> <p>
<b> <b>
@ -76,7 +76,7 @@
<% end %> <% end %>
</div> </div>
<% end %> <% end %>
<p><a href="/watch?v=<%= item.id %>"><%= item.title %></a></p> <p><a href="/watch?v=<%= item.id %>"><%= HTML.escape(item.title) %></a></p>
</a> </a>
<p> <p>
<b> <b>
@ -137,7 +137,7 @@
</div> </div>
</a> </a>
<% end %> <% end %>
<p><a href="/watch?v=<%= item.id %>"><%= item.title %></a></p> <p><a href="/watch?v=<%= item.id %>"><%= HTML.escape(item.title) %></a></p>
<p> <p>
<b> <b>
<a style="width:100%" href="/channel/<%= item.ucid %>"><%= item.author %></a> <a style="width:100%" href="/channel/<%= item.ucid %>"><%= item.author %></a>