diff options
| -rw-r--r-- | src/invidious/views/components/item.ecr | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/invidious/views/components/item.ecr b/src/invidious/views/components/item.ecr index f7b9cce6..9669aaeb 100644 --- a/src/invidious/views/components/item.ecr +++ b/src/invidious/views/components/item.ecr @@ -44,7 +44,7 @@ <% end %> </div> <% end %> - <p><%= item.title %></p> + <p><%= HTML.escape(item.title) %></p> </a> <p> <b> @@ -76,7 +76,7 @@ <% end %> </div> <% end %> - <p><a href="/watch?v=<%= item.id %>"><%= item.title %></a></p> + <p><a href="/watch?v=<%= item.id %>"><%= HTML.escape(item.title) %></a></p> </a> <p> <b> @@ -137,7 +137,7 @@ </div> </a> <% end %> - <p><a href="/watch?v=<%= item.id %>"><%= item.title %></a></p> + <p><a href="/watch?v=<%= item.id %>"><%= HTML.escape(item.title) %></a></p> <p> <b> <a style="width:100%" href="/channel/<%= item.ucid %>"><%= item.author %></a> |
