From 338e85f0c6cf18661665a114e498c25927158e51 Mon Sep 17 00:00:00 2001 From: Trim21 Date: Wed, 21 Aug 2024 14:57:08 +0800 Subject: [PATCH] fix: nickname escape --- server/auth.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/server/auth.py b/server/auth.py index 25fde99..8397c34 100644 --- a/server/auth.py +++ b/server/auth.py @@ -1,3 +1,4 @@ +import html import time from typing import Any from urllib.parse import urlencode @@ -127,7 +128,7 @@ async def callback(code: str, request: Request) -> Redirect: """, user_id, user["username"], - user["nickname"], + html.unescape(user["nickname"]), ) back_to = request.session.get("backTo", "/")