Escape page titles in attributes

This commit is contained in:
Will Faught
2023-10-04 22:03:26 -07:00
parent da1eace490
commit a8e900e261
2 changed files with 2 additions and 2 deletions

View File

@@ -130,7 +130,7 @@
{{ if and $content $paramlink }}
{{ $link := or (.Param "paige.feed.page_link" | markdownify) "⏎" }}
{{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink .Title $link }}
{{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink (htmlEscape .Title) $link }}
{{ $content = print $content $footer }}
{{ end }}

View File

@@ -93,7 +93,7 @@
{{ if and $description $paramlink }}
{{ $pagelink := or (.Param "paige.feed.page_link" | markdownify) "⏎" }}
{{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink $title $pagelink }}
{{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink (htmlEscape $title) $pagelink }}
{{ $description = print $description $footer }}
{{ end }}