Fix #1950 attempt to encode hdomain values before render

2025-06-17 17:56:27 +00:00 · 2022-03-25 08:31:28 +10:00
parent eb148eb8f0
commit feaafdc559
6 changed files with 22 additions and 15 deletions
--- a/frontend/js/app/user/delete.ejs
+++ b/frontend/js/app/user/delete.ejs
@ -7,7 +7,7 @@
        <form>
            <div class="row">
                <div class="col-sm-12 col-md-12">
-                    <%= i18n('users', 'delete-confirm', {name: name}) %>
+                    <%= i18n('users', 'delete-confirm', {name: name.toHtmlEntities()}) %>
                </div>
            </div>
        </form>