fix: escape moderation note before adding to dom

4 years ago · 75ebe78619
parent 40c9fca918
commit 75ebe78619
1 changed files with 1 additions and 1 deletions
--- a/public/src/client/account/info.js
+++ b/public/src/client/account/info.js
@ -21,7 +21,7 @@ define('forum/account/info', ['forum/account/header', 'components', 'forum/accou
 				app.alertSuccess('[[user:info.moderation-note.success]]');
 				var timestamp = Date.now();
 				var data = [{
-					note: note,
+					note: utils.escapeHTML(note),
 					user: app.user,
 					timestamp: timestamp,
 					timestampISO: utils.toISOString(timestamp),