Template escaping

2022-08-23 22:18:14 +02:00
parent 27acc17eac
commit 435b9f4541
12 changed files with 25 additions and 24 deletions
--- a/site/templates/notes.php
+++ b/site/templates/notes.php
@@ -26,7 +26,7 @@
 <?php if (empty($tag) === false): ?>
 <header class="h1">
  <h1>
-    <small>Tag:</small> <?= html($tag) ?>
+    <small>Tag:</small> <?= esc($tag) ?>
    <a href="<?= $page->url() ?>" aria-label="All Notes">&times;</a>
  </h1>
 </header>