localhost_frssoft/bloat
1
0
Fork 0
mirror of https://gitea.phreedom.club/localhost_frssoft/bloat.git synced 2025-05-04 19:08:45 +00:00
Code Issues Projects Releases Wiki Activity

HTML Escape search queries

Browse source
This commit is contained in:
r 2020-05-29 10:41:59 +00:00
parent 051908cfb7
commit 1ae3c33b7d
3 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
templates/search.tmpl
View file

@ -5,7 +5,7 @@
<form class="search-form" action="/search" method="GET">
<span class="post-form-field>
<label for="query"> Query </label>
<input id="query" name="q" value="{{.Q}}">
<input id="query" name="q" value="{{.Q | HTMLEscape}}">
</span>
<span class="post-form-field>
<label for="type"> Type </label>

2
templates/usersearch.tmpl
View file

@ -5,7 +5,7 @@
<form class="search-form" action="/usersearch/{{.User.ID}}" method="GET">
<span class="post-form-field>
<label for="query"> Query </label>
<input id="query" name="q" value="{{.Q}}">
<input id="query" name="q" value="{{.Q | HTMLEscape}}">
</span>
<button type="submit"> Search </button>
</form>