forgot to escape

dimdenGD · Sep 18, 2022 · 98555f1 · 98555f1
1 parent 1be8cb5
commit 98555f1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/layouts/header/script.js b/layouts/header/script.js
@@ -1185,11 +1185,11 @@ setTimeout(async () => {
                         </a>
                         <br>
                         <a class="preview-user-info" href="https://twitter.com/${user.screen_name}">
-                            <h1 class="preview-user-name">${user.name}</h1>
+                            <h1 class="preview-user-name">${escapeHTML(user.name)}</h1>
                             <h2 class="preview-user-handle">@${user.screen_name}</h2>
                         </a>
                         <button class="nice-button preview-user-follow ${user.following ? 'following' : 'follow'}">${user.following ? 'Following' : 'Follow'}</button>
-                        <span class="preview-user-description">${user.description}</span>
+                        <span class="preview-user-description">${escapeHTML(user.description)}</span>
                         <br>
                         <div class="preview-user-stats">
                             <a class="user-stat-div" href="https://twitter.com/${user.screen_name}/following">

diff --git a/manifest.json b/manifest.json
@@ -1,7 +1,7 @@
 {
   "name": "Old Twitter Layout (2022)",
   "description": "A new extension that returns old Twitter's look.",
-  "version": "1.5.8.1",
+  "version": "1.5.8.2",
   "manifest_version": 3,
   "homepage_url": "https://github.com/dimdenGD/OldTwitter",
   "background": {