diff options
| author | rr- <rr-@sakuya.pl> | 2016-06-23 12:19:32 +0200 |
|---|---|---|
| committer | rr- <rr-@sakuya.pl> | 2016-06-23 12:47:56 +0200 |
| commit | c7f6663c367cca8be3343a695d3f5ed052d781a0 (patch) | |
| tree | ab282c60fbb4dc1de50a398f233bfeefc7a2fd9a /client/html/user_summary.tpl | |
| parent | 6ea129a9ef629d89b03d925925c0704d8eec586f (diff) | |
client/general: escape entity names in links
Diffstat (limited to 'client/html/user_summary.tpl')
| -rw-r--r-- | client/html/user_summary.tpl | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/client/html/user_summary.tpl b/client/html/user_summary.tpl index 3595ea5..314db77 100644 --- a/client/html/user_summary.tpl +++ b/client/html/user_summary.tpl @@ -10,9 +10,9 @@ <nav> <p><strong>Quick links</strong></p> <ul> - <li><a href='/posts/text=submit:<%- ctx.user.name %>'><%- ctx.user.uploadedPostCount %> uploads</a></li> - <li><a href='/posts/text=fav:<%- ctx.user.name %>'><%- ctx.user.favoritePostCount %> favorites</a></li> - <li><a href='/posts/text=comment:<%- ctx.user.name %>'><%- ctx.user.commentCount %> comments</a></li> + <li><a href='/posts/text=submit:<%- encodeURIComponent(ctx.user.name) %>'><%- ctx.user.uploadedPostCount %> uploads</a></li> + <li><a href='/posts/text=fav:<%- encodeURIComponent(ctx.user.name) %>'><%- ctx.user.favoritePostCount %> favorites</a></li> + <li><a href='/posts/text=comment:<%- encodeURIComponent(ctx.user.name) %>'><%- ctx.user.commentCount %> comments</a></li> </ul> </nav> |