diff options
| author | Matthew Holt <[email protected]> | 2024-04-12 15:59:59 -0600 |
|---|---|---|
| committer | Matthew Holt <[email protected]> | 2024-04-12 15:59:59 -0600 |
| commit | 5d8b45c9fbbd40c5c1a43f23a6d0c2f284d2b6ba (patch) | |
| tree | d5c3ad8e9d5dcab2052c68219846bc73da7b831c | |
| parent | 0b381eb766dfad11f374342c34fe3606b9005562 (diff) | |
| download | caddy-5d8b45c9fbbd40c5c1a43f23a6d0c2f284d2b6ba.tar.gz caddy-5d8b45c9fbbd40c5c1a43f23a6d0c2f284d2b6ba.zip | |
fileserver: Escape # and ? in img src (fix #6237)
| -rw-r--r-- | modules/caddyhttp/fileserver/browse.html | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/caddyhttp/fileserver/browse.html b/modules/caddyhttp/fileserver/browse.html index 484d90020..fdc4b9c3c 100644 --- a/modules/caddyhttp/fileserver/browse.html +++ b/modules/caddyhttp/fileserver/browse.html @@ -21,7 +21,7 @@ </svg> {{- else if .HasExt ".jpg" ".jpeg" ".png" ".gif" ".webp" ".tiff" ".bmp" ".heif" ".heic" ".svg"}} {{- if eq .Tpl.Layout "grid"}} - <img loading="lazy" src="{{html .Name}}"> + <img loading="lazy" src="{{.Name | replace "#" "%23" | replace "?" "%3f" | html}}"> {{- else}} <svg xmlns="http://www.w3.org/2000/svg" class="icon icon-tabler icon-tabler-photo" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"> <path stroke="none" d="M0 0h24v24H0z" fill="none"/> |