fix: escape avatar image (#37633)
This commit is contained in:
parent
05854a5803
commit
3c027bdc58
1 changed files with 1 additions and 1 deletions
|
|
@ -4,7 +4,7 @@
|
|||
{% if image or user_info.image %}
|
||||
<img
|
||||
class="avatar-frame standard-image"
|
||||
src="{{ image or user_info.image }}"
|
||||
src="{{ (image or user_info.image) |e }}"
|
||||
title="{{ full_name|e or user_info.name|e }}">
|
||||
{% else %}
|
||||
<span
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue