Escape search query printed in user alert message - Fixes #183

5 years ago · a0c0f56968
1 changed files with 1 additions and 1 deletions
--- a/views/layout.pug
+++ b/views/layout.pug
@ -130,7 +130,7 @@ html(lang="en")

 				if (userMessage)
 					div(class="alert", class=(userMessageType ? ("alert-"  + userMessageType) : "alert-warning"), role="alert")
-						span !{userMessage}
+						span #{userMessage}
 				
 				block content