message-row: HTML escape values of HTML tag attributes

This commit is contained in:
Kévin Commaille 2023-10-03 10:28:20 +02:00
parent bbe46860cd
commit 5bd7c6ccca
No known key found for this signature in database
GPG key ID: 29A48C1F03620416

View file

@ -319,7 +319,7 @@ pub fn extract_mentions(s: &str, room: &Room) -> (String, Vec<(Pill, String)>) {
new_string,
r#" {}="{}""#,
String::from_utf8_lossy(attr_name),
String::from_utf8_lossy(attr_value),
html_escape(&String::from_utf8_lossy(attr_value)),
)
.unwrap();
}