diff options
| author | rr- <rr-@sakuya.pl> | 2016-06-23 12:19:32 +0200 |
|---|---|---|
| committer | rr- <rr-@sakuya.pl> | 2016-06-23 12:47:56 +0200 |
| commit | c7f6663c367cca8be3343a695d3f5ed052d781a0 (patch) | |
| tree | ab282c60fbb4dc1de50a398f233bfeefc7a2fd9a /client/html/tag.tpl | |
| parent | 6ea129a9ef629d89b03d925925c0704d8eec586f (diff) | |
client/general: escape entity names in links
Diffstat (limited to 'client/html/tag.tpl')
| -rw-r--r-- | client/html/tag.tpl | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/client/html/tag.tpl b/client/html/tag.tpl index 239c2f3..8e959dd 100644 --- a/client/html/tag.tpl +++ b/client/html/tag.tpl @@ -2,15 +2,15 @@ <h1><%- ctx.tag.names[0] %></h1> <nav class='buttons'><!-- --><ul><!-- - --><li data-name='summary'><a href='/tag/<%- ctx.tag.names[0] %>'>Summary</a></li><!-- + --><li data-name='summary'><a href='/tag/<%- encodeURIComponent(ctx.tag.names[0]) %>'>Summary</a></li><!-- --><% if (ctx.canMerge) { %><!-- - --><li data-name='edit'><a href='/tag/<%- ctx.tag.names[0] %>/edit'>Edit</a></li><!-- + --><li data-name='edit'><a href='/tag/<%- encodeURIComponent(ctx.tag.names[0]) %>/edit'>Edit</a></li><!-- --><% } %><!-- --><% if (ctx.canMerge) { %><!-- - --><li data-name='merge'><a href='/tag/<%- ctx.tag.names[0] %>/merge'>Merge with…</a></li><!-- + --><li data-name='merge'><a href='/tag/<%- encodeURIComponent(ctx.tag.names[0]) %>/merge'>Merge with…</a></li><!-- --><% } %><!-- --><% if (ctx.canDelete) { %><!-- - --><li data-name='delete'><a href='/tag/<%- ctx.tag.names[0] %>/delete'>Delete</a></li><!-- + --><li data-name='delete'><a href='/tag/<%- encodeURIComponent(ctx.tag.names[0]) %>/delete'>Delete</a></li><!-- --><% } %><!-- --></ul><!-- --></nav> |