From d22820080fe6a7957c7221a1e8aafad061a77dc1 Mon Sep 17 00:00:00 2001
From: Diego Heras <ngosang@hotmail.es>
Date: Sun, 17 Apr 2022 11:26:54 +0200
Subject: [PATCH] webui: escape form fields. closes #12883 (#13172)

https://handlebarsjs.com/guide/expressions.html#html-escaping
---
 src/Jackett.Common/Content/index.html | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/Jackett.Common/Content/index.html b/src/Jackett.Common/Content/index.html
index 28f50b617..ea4312d98 100644
--- a/src/Jackett.Common/Content/index.html
+++ b/src/Jackett.Common/Content/index.html
@@ -237,15 +237,15 @@
     <script id="setup-item-inputstring" type="text/x-handlebars-template">
         <div class="setup-item-inputstring">
             {{#if ispassword}}
-            <input class="form-control" type="password" value="{{{value}}}" />
+            <input class="form-control" type="password" value="{{value}}" />
             {{else}}
-            <input class="form-control" type="text" value="{{{value}}}" />
+            <input class="form-control" type="text" value="{{value}}" />
             {{/if}}
         </div>
     </script>
     <script id="setup-item-password" type="text/x-handlebars-template">
         <div class="setup-item-password">
-            <input class="form-control" type="password" value="{{{value}}}" />
+            <input class="form-control" type="password" value="{{value}}" />
         </div>
     </script>
     <script id="setup-item-inputbool" type="text/x-handlebars-template">
@@ -291,7 +291,7 @@
     </script>
     <script id="setup-item-hiddendata" type="text/x-handlebars-template">
         <div class="setup-item-hiddendata">
-            <input class="form-control" type="text" value="{{{value}}}" />
+            <input class="form-control" type="text" value="{{value}}" />
         </div>
     </script>
     <script id="setup-item-alternativesitelinks" type="text/x-handlebars-template">