Escape warning messages for disabled comments

This commit is contained in:
syeopite 2023-08-08 23:12:26 -07:00
parent 2e590ee67c
commit 38063bbd23
No known key found for this signature in database
GPG Key ID: A73C186DA3955A1A

View File

@ -300,7 +300,7 @@ we're going to need to do it here in order to allow for translations.
<div id="comments" class="comments"> <div id="comments" class="comments">
<% if (params.comments <=> ["", ""]) == 0 %> <% if (params.comments <=> ["", ""]) == 0 %>
<div id="comments-disabled-message" class="h-box v-box"> <div id="comments-disabled-message" class="h-box v-box">
<p><b><%=translate(locale, "invidious_comments_disabled_text")%></b></p> <p><b><%=HTML.escape(translate(locale, "invidious_comments_disabled_text"))%></b></p>
</div> </div>
<% else %> <% else %>
<% if video.comments? %> <% if video.comments? %>
@ -315,7 +315,7 @@ we're going to need to do it here in order to allow for translations.
<% end %> <% end %>
<% else %> <% else %>
<div id="comments-turned-off-on-video-message" class="h-box v-box"> <div id="comments-turned-off-on-video-message" class="h-box v-box">
<p><b><%=translate(locale, "youtube_comments_disabled_text")%></b></p> <p><b><%=HTML.escape(translate(locale, "youtube_comments_disabled_text"))%></b></p>
<p> <p>
<b> <b>