Escape error content displayed when subscribing fails (as it might contain HTML).

2025-06-17 17:59:10 +00:00
parent ef1f3cbcef
commit 5b0d325733
2 changed files with 2 additions and 2 deletions
--- a/js/CommonDialogs.js
+++ b/js/CommonDialogs.js
@@ -195,7 +195,7 @@ const	CommonDialogs = {
 													}
 													break;
 												case 5:
-													dialog.show_error(__("Couldn't download the specified URL: %s").replace("%s", rc['message']));
+													dialog.show_error(__("Couldn't download the specified URL: %s").replace("%s", App.escapeHtml(rc['message'])));
 													break;
 												case 6:
 													dialog.show_error(__("XML validation failed: %s").replace("%s", rc['message']));