diff options
author | r <r@freesoftwareextremist.com> | 2021-04-23 10:19:09 +0000 |
---|---|---|
committer | r <r@freesoftwareextremist.com> | 2021-04-23 10:19:09 +0000 |
commit | 469f2d1d25f0b266abb15eab410131ebe1856aad (patch) | |
tree | 9d43be7fd30af12d186e5a54adf2ee9228f3243b /service | |
parent | bd74cb50e7e7be61f88687bc2d5f7ac63b45ea70 (diff) | |
download | bloat-469f2d1d25f0b266abb15eab410131ebe1856aad.tar.gz bloat-469f2d1d25f0b266abb15eab410131ebe1856aad.zip |
Fix HTML escaping
Diffstat (limited to 'service')
-rw-r--r-- | service/service.go | 11 |
1 files changed, 4 insertions, 7 deletions
diff --git a/service/service.go b/service/service.go index 5d80c28..d548342 100644 --- a/service/service.go +++ b/service/service.go @@ -3,7 +3,6 @@ package service import ( "errors" "fmt" - "html/template" "mime/multipart" "net/url" "strings" @@ -560,16 +559,15 @@ func (s *service) UserSearchPage(c *client, url.QueryEscape(q), offset) } - qq := template.HTMLEscapeString(q) if len(q) > 0 { - title += " \"" + qq + "\"" + title += " \"" + q + "\"" } cdata := s.cdata(c, title, 0, 0, "") data := &renderer.UserSearchData{ CommonData: cdata, User: user, - Q: qq, + Q: q, Statuses: results.Statuses, NextLink: nextLink, } @@ -620,15 +618,14 @@ func (s *service) SearchPage(c *client, url.QueryEscape(q), qType, offset) } - qq := template.HTMLEscapeString(q) if len(q) > 0 { - title += " \"" + qq + "\"" + title += " \"" + q + "\"" } cdata := s.cdata(c, title, 0, 0, "") data := &renderer.SearchData{ CommonData: cdata, - Q: qq, + Q: q, Type: qType, Users: results.Accounts, Statuses: results.Statuses, |