From f37b9a5bd0caf8e15e3bf3dfd570cf111048ea89 Mon Sep 17 00:00:00 2001
From: Mystikfluu <Mystikfluu@gmail.com>
Date: Thu, 23 Jun 2022 21:28:21 +0200
Subject: [PATCH] add escaping of `'`

---
 js/posts.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/js/posts.js b/js/posts.js
index 7e2d63b..b48732d 100644
--- a/js/posts.js
+++ b/js/posts.js
@@ -105,7 +105,7 @@ async function createPost(username,text,time,specialtext,postid,isbot) {
   }
   newP.appendChild(spacerTextNode())
   // |\>.</|
-  newP.innerHTML += `<button onclick="reply('${username}',${postid},'${filterPost(text)}')">Reply to this Post</button>`
+  newP.innerHTML += `<button onclick="reply('${username}',${postid},'${htmlesc(text).replace("'","\\'")}')">Reply to this Post</button>`
 
   newDiv.appendChild(newP)
   newDiv.innerHTML += filterPost(text)