diff options
Diffstat (limited to 'templates/note.php')
| -rw-r--r-- | templates/note.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/templates/note.php b/templates/note.php index f9eef45..b43e63e 100644 --- a/templates/note.php +++ b/templates/note.php @@ -79,12 +79,12 @@ if ($user != null) { <?php foreach ($note->attachments as $attachment): ?> <div> <?php if (str_starts_with($attachment->type, 'image/')): ?> - <img src="<?= $attachment->href ?>" alt="<?= $attachment->description ?? '' ?>" - title="<?= $attachment->description ?? '' ?>"> + <img src="<?= $attachment->href ?>" alt="<?= htmlspecialchars($attachment->description ?? '') ?>" + title="<?= htmlspecialchars($attachment->description ?? '') ?>"> <?php else: ?> <a class="file" href="<?= $attachment->href ?>" target="_blank"> <span class="material-symbols attach-file"></span> - <span><?= $attachment->description ?? basename($attachment->href) ?></span> + <span><?= htmlspecialchars($attachment->description ?? basename($attachment->href)) ?></span> </a> <?php endif; ?> </div> |