Escape guild name in embed

This commit is contained in:
Jeremy Zhang 2018-01-20 20:51:37 +00:00
parent 1e425bcded
commit 6b1c6179d1
2 changed files with 3 additions and 3 deletions

View File

@ -27,7 +27,7 @@
{% include "opengraph_tags.html.j2" %} {% include "opengraph_tags.html.j2" %}
{% endwith %} {% endwith %}
<title>{{ guild['name'] }} - Embed - Titan Embeds for Discord</title> <title>{{ guild['name']|e }} - Embed - Titan Embeds for Discord</title>
{% include 'google_analytics.html.j2' %} {% include 'google_analytics.html.j2' %}
<script src='https://www.google.com/recaptcha/api.js'></script> <script src='https://www.google.com/recaptcha/api.js'></script>

View File

@ -1,5 +1,5 @@
<meta property="og:title" content="{{ title }} page on Titan Embeds for Discord" /> <meta property="og:title" content="{{ title|e }} page on Titan Embeds for Discord" />
<meta property="og:type" content="website" /> <meta property="og:type" content="website" />
<meta property="og:url" content="{{ request.base_url }}" /> <meta property="og:url" content="{{ request.base_url }}" />
<meta property="og:image" content="{{ url_for('static', filename='img/titanembeds_square.png', _external=True) if not image else image }}" /> <meta property="og:image" content="{{ url_for('static', filename='img/titanembeds_square.png', _external=True) if not image else image }}" />
<meta property="og:description" content="{{ description }}" /> <meta property="og:description" content="{{ description|e }}" />