HTML for episode numbers on Credit Page is escaped
Describe the bug
HTML for Episode numbers on credit page is escaped
Steps to reproduce
- Create an episode,
- Create a person,
- Link that person to this episode,
- Go to
/credit
page.
Expected behavior
HTML should not be escaped.
Actual behavior
HTML is escaped.
Relevant logs and/or screenshots
HTML source code:
<a href="https://podcast.bruitbruit.com/@bruitbruit/episodes/les-obsedes-episode-2"
class="text-sm text-skin-muted hover:underline">
Les Obsédés - épisode 2<abbr class="tracking-wider text-xs ml-2" title="Season 05 episode 02" data-tooltip="bottom">S05:E02</abbr>
</a>
Context
- Castopod: 1.0.0-beta.9
- OS: Debian 10
- Browser: Any
- Web server: NGinx
Possible fixes
Somewhere in themes/cp_app/pages/credit.php
, probably line 41:
<?= esc($in['title']) ?>
Edited by Benjamin Bellamy