diff options
| -rw-r--r-- | routers/api/v1/user/user.go | 3 | ||||
| -rw-r--r-- | templates/repo/editor/commit_form.tmpl | 3 | ||||
| -rw-r--r-- | templates/repo/issue/view_title.tmpl | 2 |
3 files changed, 5 insertions, 3 deletions
diff --git a/routers/api/v1/user/user.go b/routers/api/v1/user/user.go index 5a59fd7ca9..f9c308cfce 100644 --- a/routers/api/v1/user/user.go +++ b/routers/api/v1/user/user.go @@ -8,6 +8,7 @@ import ( "strings" "github.com/Unknwon/com" + "github.com/gogits/gogs/pkg/markup" api "code.gitea.io/sdk/gitea" @@ -50,7 +51,7 @@ func Search(ctx *context.APIContext) { ID: users[i].ID, UserName: users[i].Name, AvatarURL: users[i].AvatarLink(), - FullName: users[i].FullName, + FullName: markup.Sanitize(users[i].FullName), } if ctx.IsSigned { results[i].Email = users[i].Email diff --git a/templates/repo/editor/commit_form.tmpl b/templates/repo/editor/commit_form.tmpl index 43021ca59a..7b7e2cf463 100644 --- a/templates/repo/editor/commit_form.tmpl +++ b/templates/repo/editor/commit_form.tmpl @@ -14,7 +14,8 @@ <input type="radio" class="js-quick-pull-choice-option" name="commit_choice" value="direct" {{if eq .commit_choice "direct"}}checked{{end}}> <label> <i class="octicon octicon-git-commit" height="16" width="14"></i> - {{.i18n.Tr "repo.editor.commit_directly_to_this_branch" .BranchName | Safe}} + {{$branchName := .BranchName | Str2html}} + {{.i18n.Tr "repo.editor.commit_directly_to_this_branch" $branchName | Safe}} </label> </div> </div> diff --git a/templates/repo/issue/view_title.tmpl b/templates/repo/issue/view_title.tmpl index 3f3b62e653..4650ba4c80 100644 --- a/templates/repo/issue/view_title.tmpl +++ b/templates/repo/issue/view_title.tmpl @@ -28,7 +28,7 @@ {{if .Issue.PullRequest.HasMerged}} {{ $mergedStr:= TimeSince .Issue.PullRequest.Merged $.Lang }} <a {{if gt .Issue.PullRequest.Merger.ID 0}}href="{{.Issue.PullRequest.Merger.HomeLink}}"{{end}}>{{.Issue.PullRequest.Merger.Name}}</a> - <span class="pull-desc">{{$.i18n.Tr "repo.pulls.merged_title_desc" .NumCommits .HeadTarget .BaseTarget $mergedStr | Safe}}</span> + <span class="pull-desc">{{$.i18n.Tr "repo.pulls.merged_title_desc" .NumCommits .HeadTarget .BaseTarget $mergedStr | Str2html}}</span> {{else}} <a {{if gt .Issue.Poster.ID 0}}href="{{.Issue.Poster.HomeLink}}"{{end}}>{{.Issue.Poster.Name}}</a> <span class="pull-desc">{{$.i18n.Tr "repo.pulls.title_desc" .NumCommits .HeadTarget .BaseTarget | Str2html}}</span> |