aboutsummaryrefslogtreecommitdiff
path: root/quotes/index.js
diff options
context:
space:
mode:
authorLarsVomMars2020-10-10 11:41:30 +0200
committerLarsVomMars2020-10-10 11:41:30 +0200
commit2d93f2db26b7b8ef99264b158553c880bc205f42 (patch)
treebcae1e9a78962ac85bc036b22bae985ba6d0d936 /quotes/index.js
parente6626356d90fcc58db1dbfad35211c0b3a103aa7 (diff)
parent7a4ade2036140203cee39cc7622f835114862515 (diff)
Merge branch 'master' of github.com:marvinborner/abizeugs into profile
Diffstat (limited to 'quotes/index.js')
-rw-r--r--quotes/index.js2
1 files changed, 1 insertions, 1 deletions
diff --git a/quotes/index.js b/quotes/index.js
index 5aa0646..0e0717b 100644
--- a/quotes/index.js
+++ b/quotes/index.js
@@ -11,7 +11,7 @@ app.post("/api/add", checkUser, async (req, res) => {
await db.query("INSERT INTO quotes (user_id, author_id, quote) VALUE (?,?,?)", [
req.session.uid,
parseInt(req.body.author),
- req.body.quote,
+ req.body.quote.replace(/</g, "&lt;").replace(/>/g, "&gt;"),
]);
res.redirect("/quotes");
} catch (e) {