From facda9a51ee3e9780860902b46633b81c84a53bb Mon Sep 17 00:00:00 2001
From: syeopite <syeopite@syeopite.dev>
Date: Tue, 8 Aug 2023 23:12:26 -0700
Subject: [PATCH] Escape warning messages for disabled comments

---
 src/invidious/views/watch.ecr | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/invidious/views/watch.ecr b/src/invidious/views/watch.ecr
index 583f81334..f5c368217 100644
--- a/src/invidious/views/watch.ecr
+++ b/src/invidious/views/watch.ecr
@@ -300,7 +300,7 @@ we're going to need to do it here in order to allow for translations.
             <div id="comments" class="comments">
                 <% if (params.comments <=> ["", ""]) == 0 %>
                     <div id="comments-disabled-message" class="h-box v-box">
-                        <p><b><%= I18n.translate(locale, "invidious_comments_disabled_text") %></b></p>
+                        <p><b><%= HTML.escape(I18n.translate(locale, "invidious_comments_disabled_text")) %></b></p>
                     </div>
                 <% else %>
                     <% if video.comments? %>
@@ -315,7 +315,8 @@ we're going to need to do it here in order to allow for translations.
                         <% end %>
                     <% else %>
                         <div id="comments-turned-off-on-video-message" class="h-box v-box">
-                            <p><b><%= I18n.translate(locale, "youtube_comments_disabled_text") %></b></p>
+                            <p><b><%= HTML.escape(I18n.translate(locale, "youtube_comments_disabled_text")) %></b></p>
+
                             <p>
                                 <b>
                                     <a href="javascript:void(0)" data-comments="reddit" id="try-reddit-comments-link">