]> git.gir.st - subscriptionfeed.git/commitdiff
reddit: textarea hack does't escape quotes master
authorgirst <tobi@isticktoit.net>
Fri, 3 May 2024 13:53:48 +0000 (13:53 +0000)
committergirst <tobi@isticktoit.net>
Fri, 3 May 2024 13:53:48 +0000 (13:53 +0000)
app/reddit/static/client.js

index 60064ea030b008c6e353ec8e898e7cf6bcbc0c34..33c4241df3414f5b52e088ee465cff51183d90b1 100644 (file)
@@ -4,7 +4,7 @@ function template(tpl, replacements) {
            let e = document.createElement("textarea");
            e.innerHTML = s;
            e.innerText = e.value;
-           return e.innerHTML;
+           return e.innerHTML.replaceAll('"','&quot;').replaceAll("'","&apos;");
        }
 
        for (let key in replacements) {
Imprint / Impressum