From 8272eb1230f82319d3880a3eaa3bed645165db7c Mon Sep 17 00:00:00 2001
From: Mystikfluu <Mystikfluu@gmail.com>
Date: Thu, 23 Jun 2022 21:48:14 +0200
Subject: [PATCH] harsher escaping in order to fix xss

---
 js/posts.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/js/posts.js b/js/posts.js
index b48732d..164fc5d 100644
--- a/js/posts.js
+++ b/js/posts.js
@@ -105,7 +105,7 @@ async function createPost(username,text,time,specialtext,postid,isbot) {
   }
   newP.appendChild(spacerTextNode())
   // |\>.</|
-  newP.innerHTML += `<button onclick="reply('${username}',${postid},'${htmlesc(text).replace("'","\\'")}')">Reply to this Post</button>`
+  newP.innerHTML += `<button onclick="reply('${username}',${postid},'${htmlesc(text).replace("'","\\\\'")}')">Reply to this Post</button>`
 
   newDiv.appendChild(newP)
   newDiv.innerHTML += filterPost(text)