From 45b5629fe43d036d27db9bc0f100a1ad8cffc027 Mon Sep 17 00:00:00 2001
From: Thulinma <jaron@vietors.com>
Date: Sat, 11 Sep 2021 17:33:09 +0200
Subject: [PATCH] Fix a few more HTML injections
---
src/RoomsModel.cpp | 2 +-
src/timeline/Reaction.h | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/src/RoomsModel.cpp b/src/RoomsModel.cpp
index 80f13756d..656a0debd 100644
--- a/src/RoomsModel.cpp
+++ b/src/RoomsModel.cpp
@@ -77,7 +77,7 @@ RoomsModel::data(const QModelIndex &index, int role) const
return QString::fromStdString(
roomInfos.at(roomids[index.row()]).avatar_url);
case Roles::RoomID:
- return roomids[index.row()];
+ return roomids[index.row()].toHtmlEscaped();
}
}
return {};
diff --git a/src/timeline/Reaction.h b/src/timeline/Reaction.h
index 47dac6172..788e9ced3 100644
--- a/src/timeline/Reaction.h
+++ b/src/timeline/Reaction.h
@@ -16,8 +16,8 @@ struct Reaction
Q_PROPERTY(int count READ count)
public:
- QString key() const { return key_; }
- QString users() const { return users_; }
+ QString key() const { return key_.toHtmlEscaped(); }
+ QString users() const { return users_.toHtmlEscaped(); }
QString selfReactedEvent() const { return selfReactedEvent_; }
int count() const { return count_; }
--
GitLab