From 271dcb7a6501ae402344ea6685c7313f49e645d5 Mon Sep 17 00:00:00 2001
From: czaks <marcin@6irc.net>
Date: Thu, 23 Apr 2015 03:45:08 +0200
Subject: fileboard: fix possible XSS (mainly applicable to 8chan)

---
 templates/post_form.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'templates/post_form.html')

diff --git a/templates/post_form.html b/templates/post_form.html
index ea3ac765..0e0d3fed 100644
--- a/templates/post_form.html
+++ b/templates/post_form.html
@@ -98,7 +98,7 @@
 				<td>
 					<select name="tag">
 						{% for id, tag in config.allowed_tags %}
-							<option value="{{ id }}">{{ tag }}</option>
+							<option value="{{ id|e }}">{{ tag|e }}</option>
 						{% endfor %}
 					</select>
 				</td>
-- 
cgit v1.3