mirror of
https://github.com/zulip/zulip.git
synced 2025-11-02 21:13:36 +00:00
4fff858aa2
This fixes a bundle of issues where we were missing "" around attributes coming from variables. In most cases, the variables were integers or fixed constants from the Zulip codebase (E.g. the name of an installed integration), but in at least one case it was user-provided data that could potentially have security impact.
13 lines
466 B
Handlebars
13 lines
466 B
Handlebars
<div class="{{this.class}}" aria-label="{{this.label}}" data-reaction-id="{{this.local_id}}">
|
|
{{#if this.emoji_alt_code}}
|
|
<div class="emoji_alt_code"> :{{this.emoji_name}}:</div>
|
|
{{else}}
|
|
{{#if this.is_realm_emoji}}
|
|
<img src="{{this.url}}" class="emoji" />
|
|
{{else}}
|
|
<div class="emoji emoji-{{this.emoji_code}}"></div>
|
|
{{/if}}
|
|
{{/if}}
|
|
<div class="message_reaction_count">{{this.count}}</div>
|
|
</div>
|