add escaping of '

This commit is contained in:
Mystikfluu 2022-06-23 21:28:21 +02:00
parent 91a61f2e69
commit f37b9a5bd0

View File

@ -105,7 +105,7 @@ async function createPost(username,text,time,specialtext,postid,isbot) {
}
newP.appendChild(spacerTextNode())
// |\>.</|
newP.innerHTML += `<button onclick="reply('${username}',${postid},'${filterPost(text)}')">Reply to this Post</button>`
newP.innerHTML += `<button onclick="reply('${username}',${postid},'${htmlesc(text).replace("'","\\'")}')">Reply to this Post</button>`
newDiv.appendChild(newP)
newDiv.innerHTML += filterPost(text)