diff options
| author | rr- <rr-@sakuya.pl> | 2016-06-23 12:19:32 +0200 |
|---|---|---|
| committer | rr- <rr-@sakuya.pl> | 2016-06-23 12:47:56 +0200 |
| commit | c7f6663c367cca8be3343a695d3f5ed052d781a0 (patch) | |
| tree | ab282c60fbb4dc1de50a398f233bfeefc7a2fd9a /client/html/post_readonly_sidebar.tpl | |
| parent | 6ea129a9ef629d89b03d925925c0704d8eec586f (diff) | |
client/general: escape entity names in links
Diffstat (limited to 'client/html/post_readonly_sidebar.tpl')
| -rw-r--r-- | client/html/post_readonly_sidebar.tpl | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/client/html/post_readonly_sidebar.tpl b/client/html/post_readonly_sidebar.tpl index 44cccc5..810cb34 100644 --- a/client/html/post_readonly_sidebar.tpl +++ b/client/html/post_readonly_sidebar.tpl @@ -33,8 +33,8 @@ <section class='search'> Search on - <a href='http://iqdb.org/?url=<%- ctx.post.contentUrl %>'>IQDB</a> · - <a href='https://www.google.com/searchbyimage?&image_url=<%- ctx.post.contentUrl %>'>Google Images</a> + <a href='http://iqdb.org/?url=<%- encodeURIComponent(ctx.post.contentUrl) %>'>IQDB</a> · + <a href='https://www.google.com/searchbyimage?&image_url=<%- encodeURIComponent(ctx.post.contentUrl) %>'>Google Images</a> </section> <section class='social'> @@ -50,14 +50,14 @@ --><% for (let tag of ctx.post.tags) { %><!-- --><li><!-- --><% if (ctx.canViewTags) { %><!-- - --><a href='/tag/<%- tag %>' class='<%= ctx.makeCssName(ctx.getTagCategory(tag), 'tag') %>'><!-- + --><a href='/tag/<%- encodeURIComponent(tag) %>' class='<%= ctx.makeCssName(ctx.getTagCategory(tag), 'tag') %>'><!-- --><i class='fa fa-tag'></i><!-- --><% } %><!-- --><% if (ctx.canListPosts) { %><!-- --></a><!-- --><% } %><!-- --><% if (ctx.canListPosts) { %><!-- - --><a href='/posts/text=<%- tag %>' class='<%= ctx.makeCssName(ctx.getTagCategory(tag), 'tag') %>'><!-- + --><a href='/posts/text=<%- encodeURIComponent(tag) %>' class='<%= ctx.makeCssName(ctx.getTagCategory(tag), 'tag') %>'><!-- --><% } %><!-- --><%- tag %><!-- --><% if (ctx.canListPosts) { %><!-- |