escaped ExternalUrls with escapeHtml()
This commit is contained in:
@@ -747,7 +747,7 @@ function renderLinks(page, item) {
|
||||
|
||||
if (item.ExternalUrls) {
|
||||
for (const url of item.ExternalUrls) {
|
||||
links.push(`<a is="emby-linkbutton" class="button-link" href="${url.Url}" target="_blank">${url.Name}</a>`);
|
||||
links.push(`<a is="emby-linkbutton" class="button-link" href="${url.Url}" target="_blank">${escapeHtml(url.Name)}</a>`);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user