diff --git a/src/static/js/chat.js b/src/static/js/chat.js index 86b025097..63c17c153 100755 --- a/src/static/js/chat.js +++ b/src/static/js/chat.js @@ -189,6 +189,7 @@ exports.chat = (() => { .append($('
')
+ .append($('').addClass('author-name').text(ctx.authorName))
+ // ctx.text was HTML-escaped before calling the hook. Hook functions are trusted
+ // to not introduce an XSS vulnerability by adding unescaped user input.
+ .append($(' ')
- .append($('').addClass('author-name').text(ctx.authorName))
- // ctx.text was HTML-escaped before calling the hook. Hook functions are trusted
- // to not introduce an XSS vulnerability by adding unescaped user input.
- .append($('