diff options
author | Frédéric Guillot <fred@miniflux.net> | 2020-01-02 11:06:57 -0800 |
---|---|---|
committer | Frédéric Guillot <fred@miniflux.net> | 2020-01-02 11:20:10 -0800 |
commit | 4d9956cf658d7a970654ae3baf23ad995e287525 (patch) | |
tree | 475fc8d39549ec24ad09e0fbc0b206ef0141994c /template/html/common/item_meta.html | |
parent | ac3c936820033f27e32c9a4490f2f33d6ffd6b05 (diff) |
Make sure external URLs are not encoded incorrectly by Go template engine
Diffstat (limited to 'template/html/common/item_meta.html')
-rw-r--r-- | template/html/common/item_meta.html | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/template/html/common/item_meta.html b/template/html/common/item_meta.html index ba83da7..1797700 100644 --- a/template/html/common/item_meta.html +++ b/template/html/common/item_meta.html @@ -19,11 +19,11 @@ </li> {{ end }} <li> - <a href="{{ .entry.URL }}" target="_blank" rel="noopener noreferrer" referrerpolicy="no-referrer" data-original-link="true">{{ t "entry.original.label" }}</a> + <a href="{{ .entry.URL | safeURL }}" target="_blank" rel="noopener noreferrer" referrerpolicy="no-referrer" data-original-link="true">{{ t "entry.original.label" }}</a> </li> {{ if .entry.CommentsURL }} <li> - <a href="{{ .entry.CommentsURL }}" title="{{ t "entry.comments.title" }}" target="_blank" rel="noopener noreferrer" referrerpolicy="no-referrer">{{ t "entry.comments.label" }}</a> + <a href="{{ .entry.CommentsURL | safeURL }}" title="{{ t "entry.comments.title" }}" target="_blank" rel="noopener noreferrer" referrerpolicy="no-referrer">{{ t "entry.comments.label" }}</a> </li> {{ end }} <li> |