From 48f3702255ed8a3215c064eb66861afa31cdd84c Mon Sep 17 00:00:00 2001
From: syeopite <syeopite@syeopite.dev>
Date: Tue, 8 Aug 2023 23:12:26 -0700
Subject: [PATCH] Escape warning messages for disabled comments

---
 src/invidious/views/watch.ecr | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/invidious/views/watch.ecr b/src/invidious/views/watch.ecr
index f586a29c..039fc421 100644
--- a/src/invidious/views/watch.ecr
+++ b/src/invidious/views/watch.ecr
@@ -300,7 +300,7 @@ we're going to need to do it here in order to allow for translations.
             <div id="comments" class="comments">
                 <% if (params.comments <=> ["", ""]) == 0 %>
                     <div id="comments-disabled-message" class="h-box v-box">
-                        <p><b><%=translate(locale, "invidious_comments_disabled_text")%></b></p>
+                        <p><b><%=HTML.escape(translate(locale, "invidious_comments_disabled_text"))%></b></p>
                     </div>
                 <% else %>
                     <% if video.comments? %>
@@ -315,7 +315,7 @@ we're going to need to do it here in order to allow for translations.
                         <% end %>
                     <% else %>
                         <div id="comments-turned-off-on-video-message" class="h-box v-box">
-                            <p><b><%=translate(locale, "youtube_comments_disabled_text")%></b></p>                            
+                            <p><b><%=HTML.escape(translate(locale, "youtube_comments_disabled_text"))%></b></p>                            
 
                             <p>
                                 <b>