fix: nickname escape

bangumi · Aug 21, 2024 · 338e85f · 338e85f
1 parent 636025f
commit 338e85f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/server/auth.py b/server/auth.py
@@ -1,3 +1,4 @@
+import html
 import time
 from typing import Any
 from urllib.parse import urlencode
@@ -127,7 +128,7 @@ async def callback(code: str, request: Request) -> Redirect:
     """,
         user_id,
         user["username"],
-        user["nickname"],
+        html.unescape(user["nickname"]),
     )
 
     back_to = request.session.get("backTo", "/")