From 27c2a1df69001f979ad9ed5ffbac06fc106b9e30 Mon Sep 17 00:00:00 2001
From: winter
Date: Thu, 6 Feb 2025 20:54:52 +0000
Subject: allow writing alt text on image attachments

---
 templates/note.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'templates/note.php')

diff --git a/templates/note.php b/templates/note.php
index f9eef45..b43e63e 100644
--- a/templates/note.php
+++ b/templates/note.php
@@ -79,12 +79,12 @@ if ($user != null) {
                     <?php foreach ($note->attachments as $attachment): ?>
                         <div>
                             <?php if (str_starts_with($attachment->type, 'image/')): ?>
-                                <img src="<?= $attachment->href ?>" alt="<?= $attachment->description ?? '' ?>"
-                                    title="<?= $attachment->description ?? '' ?>">
+                                <img src="<?= $attachment->href ?>" alt="<?= htmlspecialchars($attachment->description ?? '') ?>"
+                                    title="<?= htmlspecialchars($attachment->description ?? '') ?>">
                             <?php else: ?>
                                 <a class="file" href="<?= $attachment->href ?>" target="_blank">
                                     <span class="material-symbols attach-file"></span>
-                                    <span><?= $attachment->description ?? basename($attachment->href) ?></span>
+                                    <span><?= htmlspecialchars($attachment->description ?? basename($attachment->href)) ?></span>
                                 </a>
                             <?php endif; ?>
                         </div>
-- 
cgit v1.3