mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-11-02 20:16:04 +01:00
fix: escape moderation note before adding to dom
This commit is contained in:
@@ -21,7 +21,7 @@ define('forum/account/info', ['forum/account/header', 'components', 'forum/accou
|
|||||||
app.alertSuccess('[[user:info.moderation-note.success]]');
|
app.alertSuccess('[[user:info.moderation-note.success]]');
|
||||||
var timestamp = Date.now();
|
var timestamp = Date.now();
|
||||||
var data = [{
|
var data = [{
|
||||||
note: note,
|
note: utils.escapeHTML(note),
|
||||||
user: app.user,
|
user: app.user,
|
||||||
timestamp: timestamp,
|
timestamp: timestamp,
|
||||||
timestampISO: utils.toISOString(timestamp),
|
timestampISO: utils.toISOString(timestamp),
|
||||||
|
|||||||
Reference in New Issue
Block a user