Skip to content

Commit 611124d

Browse files
committed
fixed a XSS vulnerability in user comment
1 parent 259abd2 commit 611124d

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

templates/archive/detail.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,7 @@ <h2 class="am-margin-top-xs"><i class="am-icon-paperclip"></i> <a href="{{ post.
7676
</div>
7777
{% endperm %}
7878
<div class="am-margin-right-xs am-fr">
79-
<a href="javascript:reply('{{ comment.id | escapejs }}', '{{ comment.content | truncatechars:20 | escapejs }}');">回复</a>
79+
<a href="javascript:reply('{{ comment.id | escapejs | urlencode }}', '{{ comment.content | truncatechars:20 | escapejs | urlencode }}');">回复</a>
8080
</div>
8181
</div>
8282
</header>

0 commit comments

Comments
 (0)