diff --git a/CHANGELOG.md b/CHANGELOG.md index ab35a7d0..5d589e87 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,7 @@ # Changelog +- Add HTML escaping for some titles, labels and metada that was missing. + ## [4.27.1](https://github.com/mmistakes/minimal-mistakes/releases/tag/4.27.1) ### Enhancements diff --git a/_includes/footer.html b/_includes/footer.html index 2b2b7ee1..cde75d2f 100644 --- a/_includes/footer.html +++ b/_includes/footer.html @@ -7,7 +7,7 @@ {% if site.footer.links %} {% for link in site.footer.links %} {% if link.label and link.url %} -
  • {{ link.label }}
  • +
  • {{ link.label | escape_once | strip }}
  • {% endif %} {% endfor %} {% endif %} @@ -18,4 +18,4 @@ - + diff --git a/_includes/masthead.html b/_includes/masthead.html index f919fb77..c97b2aa3 100644 --- a/_includes/masthead.html +++ b/_includes/masthead.html @@ -8,8 +8,8 @@ {% endunless %} - {{ site.masthead_title | default: site.title }} - {% if site.subtitle %}{{ site.subtitle }}{% endif %} + {{ site.masthead_title | default: site.title | escape_once | strip }} + {% if site.subtitle %}{{ site.subtitle | escape_once | strip }}{% endif %}