From 669312d5ebb61831ae006f4e7330780ce4d5a545 Mon Sep 17 00:00:00 2001 From: llama Date: Wed, 18 Jun 2025 12:35:02 +0800 Subject: [PATCH] Fix unescaped deck names potentially missing from overview (#4084) * html-escape deck name in overview * move escaping past hook --- qt/aqt/overview.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/qt/aqt/overview.py b/qt/aqt/overview.py index da017714f..184a51cf5 100644 --- a/qt/aqt/overview.py +++ b/qt/aqt/overview.py @@ -2,6 +2,7 @@ # License: GNU AGPL, version 3 or later; http://www.gnu.org/licenses/agpl.html from __future__ import annotations +import html from collections.abc import Callable from dataclasses import dataclass from typing import Any @@ -197,6 +198,7 @@ class Overview: table=self._table(), ) gui_hooks.overview_will_render_content(self, content) + content.deck = html.escape(content.deck) self.web.stdHtml( self._body % content.__dict__, css=["css/overview.css"],