From 38d80f0af731326fcd5ae16c0129a056eff2fe32 Mon Sep 17 00:00:00 2001
From: erdgeist <erdgeist@erdgeist.org>
Date: Wed, 5 Feb 2025 23:05:01 +0100
Subject: Add warner if theres unescaped entities inside the Title fields

---
 app/views/nodes/edit.html.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/views/nodes/edit.html.erb b/app/views/nodes/edit.html.erb
index b9260d2..ee11047 100644
--- a/app/views/nodes/edit.html.erb
+++ b/app/views/nodes/edit.html.erb
@@ -90,7 +90,7 @@
     </tr>
     <tr>
       <td class="description">Title</td>
-      <td><%= d.text_field :title %></td>
+      <td><%= d.text_field :title, :pattern => "(?:[^<>&amp;]|&amp;amp;|&amp;lt;|&amp;gt;)*", :title => "Warning: Unescaped HTML entities detected! Use &amp;lt;, &amp;gt;, &amp;amp; instead of <, >, &." %></td>
     </tr>
     <tr>
       <td class="description">Abstract</td>
-- 
cgit v1.3