Escape HTML when displaying search results

2017-05-31 17:14:14 +02:00
parent a806f294b2
commit d67f65019e
4 changed files with 10 additions and 8 deletions
--- a/src/templates/nodes/search.jade
+++ b/src/templates/nodes/search.jade
@@ -134,9 +134,9 @@ script(type="text/template", id="hit-template")
 				span free
 			| {{/is_free}}
 		.search-hit-name
-			| {{{ _highlightResult.name.value }}}
+			| {{ name }}
 		.search-hit-meta
-			span.project {{{ project.name }}} ·
+			span.project {{ project.name }}
 			span.node_type {{{ node_type }}}
 			| {{#media}}
 			span.media · {{{ media }}}