From 50ad403c5c9a72fa6b0af4393b178610bdde7e25 Mon Sep 17 00:00:00 2001
From: MathyFurret <4866817+MathyFurret@users.noreply.github.com>
Date: Tue, 3 Mar 2026 11:51:46 -0600
Subject: [PATCH] Help tickets: Escape HTML in lock reason

---
 server/chat-plugins/helptickets.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/chat-plugins/helptickets.ts b/server/chat-plugins/helptickets.ts
index 766688deb1..249739ba48 100644
--- a/server/chat-plugins/helptickets.ts
+++ b/server/chat-plugins/helptickets.ts
@@ -1365,7 +1365,7 @@ export const textTickets: { [k: string]: TextTicketInfo } = {
 					const str = ipPunishments.map(p => (
 						`${Punishments.punishmentTypes.get(p.type)?.desc || p.type} as ` +
 						`<a href="https://${Config.routes.root}/users/${p.id}">${p.id}</a>` +
-						`${p.reason ? ` (${p.reason})` : ''}`
+						(p.reason ? Utils.html` (${p.reason})` : '')
 					));
 					if (str) buf += `Punishments: ${str.join(' | ')}<br />`;
 				}