fix: improper neutralization of user input in image wrapping code

(Backport of: 1d1639d46f)
2 years ago · 9ec7ab4afc
parent dd5ed9e507
commit 9ec7ab4afc
1 changed files with 1 additions and 1 deletions
--- a/public/src/client/topic/images.js
+++ b/public/src/client/topic/images.js
@ -24,7 +24,7 @@ define('forum/topic/images', [], function () {

 			if (!$this.parent().is('a')) {
 				$this.wrap('<a href="' + src + '" ' +
-					(!srcExt && altExt ? ' download="' + altFilename + '" ' : '') +
+					(!srcExt && altExt ? ' download="' + utils.escapeHTML(altFilename) + '" ' : '') +
 					' target="_blank" rel="noopener">');
 			}
 		});