Public/automatic
1
0
Fork 0
mirror of https://github.com/vladmandic/automatic synced 2026-09-19 01:04:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #4296 from awsr/awsr-patch-2

Browse Source 
Escape HTML characters in name and filename fields
This commit is contained in:
Vladimir Mandic
2025-10-23 15:59:46 -04:00
committed by GitHub
parent db5b528d7d adbeaad203
commit a86fb66989
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/ui_extra_networks.py
+2 -2
View File
@@ -353,9 +353,9 @@ class ExtraNetworksPage:
args = {
# "tabname": tabname,
"page": self.name,
"name": item.get('name', ''),
"name": html.escape(item.get('name', ''), quote=True),
"title": os.path.basename(item["name"].replace('_', ' ')),
"filename": item.get('filename', ''),
"filename": html.escape(item.get('filename', ''), quote=True),
"short": os.path.splitext(os.path.basename(item.get('filename', '')))[0],
"tags": '|'.join([item.get('tags')] if isinstance(item.get('tags', {}), str) else list(item.get('tags', {}).keys())),
"preview": html.escape(item.get('preview', None) or self.link_preview('html/missing.png')),