fixed a XSS vulnerability in user comment

phith0n · Jun 18, 2022 · 611124d · 611124d · phith0n · Jun 18, 2022
1 parent 259abd2
commit 611124d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/archive/detail.html b/templates/archive/detail.html
@@ -76,7 +76,7 @@ <h2 class="am-margin-top-xs"><i class="am-icon-paperclip"></i> <a href="{{ post.
                 </div>
                 {% endperm %}
                 <div class="am-margin-right-xs am-fr">
-                    <a href="javascript:reply('{{ comment.id | escapejs }}', '{{ comment.content | truncatechars:20 | escapejs }}');">回复</a>
+                    <a href="javascript:reply('{{ comment.id | escapejs | urlencode }}', '{{ comment.content | truncatechars:20 | escapejs | urlencode }}');">回复</a>
                 </div>
               </div>
             </header>