diff --git a/kernel/util/misc.go b/kernel/util/misc.go index ad047e473..549cbaae0 100644 --- a/kernel/util/misc.go +++ b/kernel/util/misc.go @@ -37,9 +37,10 @@ func InsertElem[T any](ret []T, index int, value T) []T { } func EscapeHTML(s string) string { - if strings.Contains(s, "&") { + if strings.Contains(s, "&") || strings.Contains(s, """) || strings.Contains(s, "<") || strings.Contains(s, ">") || strings.Contains(s, "'") || strings.Contains(s, "'") { return s } + if strings.ContainsAny(s, "<>\"'") { return html.EscapeString(s) }