From fb4cbc73bae831e68fe8234811184f46077db5e6 Mon Sep 17 00:00:00 2001
From: winter
Date: Mon, 20 Jan 2025 17:48:33 +0000
Subject: fix some xss situations

---
 templates/write_note_form.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'templates/write_note_form.php')

diff --git a/templates/write_note_form.php b/templates/write_note_form.php
index 914c48b..55ed77e 100644
--- a/templates/write_note_form.php
+++ b/templates/write_note_form.php
@@ -5,7 +5,7 @@
             <?php call_template('actor_avatar', ['actor' => $actor]); ?>
         </a>
         <div class="basicInfo">
-            <a class="displayName" href="/@/<?= $actor->handle ?>"><?= $actor->displayName ?></a>
+            <a class="displayName" href="/@/<?= $actor->handle ?>"><?= htmlspecialchars($actor->displayName) ?></a>
             <div class="handle">@<?= $actor->handle ?></div>
         </div>
     </div>
-- 
cgit v1.3