nodebb-theme-persona 15.1.3 → 15.1.4

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "nodebb-theme-persona",
-  "version": "15.1.3",
+  "version": "15.1.4",
   "nbbpm": {
-    "compatibility": "^4.15.0"
+    "compatibility": "^4.14.0"
   },
   "description": "Persona theme for NodeBB",
   "main": "library.js",

package/templates/account/profile.tpl

@@ -36,7 +36,7 @@
 	{{{ end }}}
 
 	<!-- IF aboutme -->
-	<div component="aboutme" class="text-center aboutme text-secondary w-75 mx-auto text-center">{{aboutmeParsed}}</div>
+	<div component="aboutme" class="text-center aboutme text-secondary w-75 mx-auto text-center">{{txEscape(aboutmeParsed)}}</div>
 	<!-- ENDIF aboutme -->
 
 	<div class="account-stats fs-1 text-center mb-3">

package/templates/partials/categories/lastpost.tpl

@@ -8,7 +8,7 @@
 		</div>
 		<div class="post-content text-xs text-break line-clamp-sm-2 lh-sm position-relative flex-fill">
 			<a class="stretched-link" tabindex="-1" href="{config.relative_path}/topic/{./topic.slug}{{{ if ./index }}}/{./index}{{{ end }}}" aria-label="{{tx("global:lastpost")}}"></a>
-			{{./content}}
+			{{txEscape(./content)}}
 		</div>
 	</div>
 	{{{ end }}}

package/templates/partials/posts_list_item.tpl

@@ -5,7 +5,7 @@
         </a>
 
         <div component="post/content" class="content mb-3 text-break">
-            {{{ if ./txContent }}}{{tx(./content)}}{{{ else }}}{{./content}}{{{ end }}}
+            {{{ if ./txContent }}}{{tx(./content)}}{{{ else }}}{{txEscape(./content)}}{{{ end }}}
         </div>
 
         <div class="mb-3">

package/templates/partials/search/results.tpl

@@ -17,7 +17,7 @@
 
 			{{{ if showAsPosts }}}
 			<div component="post/content" class="content">
-				{{./content}}
+				{{txEscape(./content)}}
 			</div>
 			{{{ end }}}
 

package/templates/partials/topic/navigation-post.tpl

@@ -9,4 +9,4 @@
 	</small>
 </div>
 
-<div>{{{ if post.txContent }}}{{tx(posts.content)}}{{{ else }}}{{post.content}}{{{ end }}}</div>
+<div>{{{ if post.txContent }}}{{tx(posts.content)}}{{{ else }}}{{txEscape(post.content)}}{{{ end }}}</div>

package/templates/partials/topic/post.tpl

@@ -72,12 +72,12 @@
 <br />
 
 <div class="content" component="post/content" itemprop="text">
-	{{{ if posts.txContent }}}{{tx(posts.content)}}{{{ else }}}{{posts.content}}{{{ end }}}
+	{{{ if posts.txContent }}}{{tx(posts.content)}}{{{ else }}}{{txEscape(posts.content)}}{{{ end }}}
 </div>
 
 <div class="post-footer">
 	{{{ if posts.user.signature }}}
-	<div component="post/signature" data-uid="{posts.user.uid}" class="post-signature">{{posts.user.signature}}</div>
+	<div component="post/signature" data-uid="{posts.user.uid}" class="post-signature">{{txEscape(posts.user.signature)}}</div>
 	{{{ end }}}
 
 	<div class="clearfix">

package/templates/partials/topics_list.tpl

@@ -121,7 +121,7 @@
 					</div>
 					<div class="post-content text-xs ps-2 line-clamp-sm-2 lh-sm text-break position-relative flex-fill">
 						<a class="stretched-link" tabindex="-1" href="{config.relative_path}/topic/{./slug}/{./teaser.index}" aria-label="{{tx("global:lastpost")}}"></a>
-						{{./teaser.content}}
+						{{txEscape(./teaser.content)}}
 					</div>
 					{{{ end }}}
 					{{{ end }}}