fix: escape avatar image (#37633)

This commit is contained in:
Aarol D'Souza 2026-02-27 17:11:14 +05:30 committed by GitHub
parent 05854a5803
commit 3c027bdc58
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -4,7 +4,7 @@
{% if image or user_info.image %}
<img
class="avatar-frame standard-image"
src="{{ image or user_info.image }}"
src="{{ (image or user_info.image) |e }}"
title="{{ full_name|e or user_info.name|e }}">
{% else %}
<span