commit 2d584d2

html.c: Also encode html characters in admin page

 1@@ -549,26 +549,26 @@ d_char *html_top_controls(snac *snac, d_char *s)
 2 
 3         L("User setup..."),
 4         snac->actor,
 5-        L("User name"),
 6-        xs_dict_get(snac->config, "name"),
 7+        L("Display name"),
 8+        encode_html(xs_dict_get(snac->config, "name")),
 9         L("Avatar"),
10         L("Bio"),
11-        xs_dict_get(snac->config, "bio"),
12+        encode_html(xs_dict_get(snac->config, "bio")),
13         strcmp(cw, "open") == 0 ? "checked" : "",
14         L("Always show sensitive content"),
15         L("Email address for notifications"),
16-        email,
17+        encode_html(email),
18         L("Telegram notifications (bot key and chat id)"),
19-        telegram_bot,
20-        telegram_chat_id,
21+        encode_html(telegram_bot),
22+        encode_html(telegram_chat_id),
23         L("Maximum days to keep posts (0: server settings)"),
24-        purge_days,
25+        encode_html(purge_days),
26         xs_type(d_dm_f_u) == XSTYPE_TRUE ? "checked" : "",
27         L("Drop direct messages from people you don't follow"),
28         xs_type(bot) == XSTYPE_TRUE ? "checked" : "",
29         L("This account is a bot"),
30-        L("Password (only to change it)"),
31-        L("Repeat Password"),
32+        L("New Password"),
33+        L("Repeat New Password"),
34         L("Update user info")
35     );
36