diff options
Diffstat (limited to 'templates/note.php')
| -rw-r--r-- | templates/note.php | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/templates/note.php b/templates/note.php index 98581c8..3e978b9 100644 --- a/templates/note.php +++ b/templates/note.php @@ -20,7 +20,8 @@ if ($user != null) { <div> <div class="infoLine"> - <a class="authorName" href="/@/<?= $note->author->getFullHandle() ?>"><?= $note->author->displayName ?></a> + <a class="authorName" + href="/@/<?= $note->author->getFullHandle() ?>"><?= htmlspecialchars($note->author->displayName) ?></a> <span class="authorHandle">@<?= $note->author->getFullHandle() ?></span> <a class="timestamp" href="/@/<?= $note->author->getFullHandle() ?>/note/<?= $note->id ?>"> <?= // TODO: localise @@ -49,7 +50,7 @@ if ($user != null) { <a href="/@/<?= $note->inReplyTo->author->getFullHandle() ?>/note/<?= $note->inReplyTo->id ?>"> <span class="material-symbols-outlined inlineIcon">reply</span> <?= sprintf(__('note.info.replyTo'), - '<b>' . $note->inReplyTo->author->displayName) . '</b>' ?> + '<b>' . htmlspecialchars($note->inReplyTo->author->displayName)) . '</b>' ?> </a> </div> <?php endif; ?> |