rainbownapkin/canopy
1
0
Fork 0
Code Issues 17 Pull requests Projects Releases Packages Wiki Activity Actions

Improved sanatization for server-side templating.

Browse source
This commit is contained in:
rainbow napkin 2025-11-04 06:09:26 -05:00
parent 35fd81e1b2
commit 08fe051269
30 changed files with 151 additions and 104 deletions
Download patch file Download diff file Expand all files Collapse all files

16
src/views/profile.ejs
View file

@ -32,21 +32,21 @@ along with this program. If not, see <https://www.gnu.org/licenses/>. %>
<div id="account">
<div class="profile dynamic-container" id="profile-div">
<span id="profile-info" class="profile">
<h1 class="profile-item" id="profile-username"><%- profile.user %></h1>
<%- include('partial/profile/status', {profile, presence, auxClass: ""}); %>
<%- include('partial/profile/image', {profile, selfProfile}); %>
<%- include('partial/profile/pronouns', {profile, selfProfile}); %>
<%- include('partial/profile/signature', {profile, selfProfile}); %>
<%- include('partial/profile/tokeCount', {profile, selfProfile}); %>
<h1 class="profile-item" id="profile-username"><%= unescape(profile.user) %></h1>
<%- include('partial/profile/status', {profile, presence, auxClass: "", unescape}); %>
<%- include('partial/profile/image', {profile, selfProfile, unescape}); %>
<%- include('partial/profile/pronouns', {profile, selfProfile, unescape}); %>
<%- include('partial/profile/signature', {profile, selfProfile, unescape}); %>
<%- include('partial/profile/tokeCount', {profile, selfProfile, unescape}); %>
<%- include('partial/profile/date', {profile, selfProfile}); %>
</span>
<span id="profile-info-aux" class="profile">
<%- include('partial/profile/bio', {profile, selfProfile}); %>
<%- include('partial/profile/bio', {profile, selfProfile, unescape}); %>
<%- include('partial/profile/badges', {profile, selfProfile}); %>
</span>
</div>
<% if(selfProfile){ %>
<%- include('partial/profile/settings', {profile, selfProfile}); %>
<%- include('partial/profile/settings', {profile, selfProfile, unescape}); %>
<% } %>
</div>
<% }else if(user){ %>