mirror of
https://codeberg.org/ashley/poke
synced 2026-03-03 15:03:43 +00:00
use escapeHtml
This commit is contained in:
@@ -1604,7 +1604,7 @@ WIP! </a>
|
||||
<% } %>
|
||||
</h5>
|
||||
<p class="comment" style="font-weight:700">
|
||||
<%- x.content %><br><br>
|
||||
<%- escapeHtml(x.content) %><br><br>
|
||||
<% if (x.like_count === 0) { %><i class="fa-light fa-thumbs-up"></i> | <i class="fa-light fa-thumbs-down"></i>
|
||||
<% } else { %><i class="fa-light fa-thumbs-up"></i>
|
||||
<%= x.like_count %> | <i class="fa-light fa-thumbs-down"></i>
|
||||
|
||||
Reference in New Issue
Block a user