mirror of
https://github.com/smogon/pokemon-showdown-client.git
synced 2026-09-14 14:59:29 -05:00
Correctly escape names in PMs
This commit is contained in:
@@ -196,7 +196,7 @@
|
||||
} else {
|
||||
group = '<small>' + BattleLog.escapeHTML(group) + '</small>';
|
||||
}
|
||||
var buf = '<div class="pm-window pm-window-' + userid + '" data-userid="' + userid + '" data-name="' + name + '">';
|
||||
var buf = '<div class="pm-window pm-window-' + userid + '" data-userid="' + userid + '" data-name="' + BattleLog.escapeHTML(name) + '">';
|
||||
buf += '<h3><button class="closebutton" href="' + app.root + 'teambuilder" tabindex="-1" aria-label="Close"><i class="fa fa-times-circle"></i></button>';
|
||||
buf += '<button class="minimizebutton" href="' + app.root + 'teambuilder" tabindex="-1" aria-label="Minimize"><i class="fa fa-minus-circle"></i></button>';
|
||||
buf += group + BattleLog.escapeHTML(name.substr(1)) + '</h3>';
|
||||
|
||||
Reference in New Issue
Block a user