Escape HTML characters when sending quotes

This commit is contained in:
Rykov7
2023-07-14 10:32:25 +03:00
parent 176b7bd56e
commit f53b19e626
+3 -3
View File
@@ -39,18 +39,18 @@ def add_stan_quote(message: types.Message):
if message.reply_to_message and message.reply_to_message.text: if message.reply_to_message and message.reply_to_message.text:
if message.reply_to_message.text not in [i[0] for i in session.query(Quote.text).filter( if message.reply_to_message.text not in [i[0] for i in session.query(Quote.text).filter(
Quote.chat_id == message.chat.id).all()]: Quote.chat_id == message.chat.id).all()]:
session.add(Quote(chat_id=message.chat.id, text=message.reply_to_message.text.replace("\n", " "))) session.add(Quote(chat_id=message.chat.id, text=html.escape(message.reply_to_message.text.replace("\n", " "))))
session.commit() session.commit()
bot.send_message( bot.send_message(
message.chat.id, message.chat.id,
"✅ <b>Добавил</b>\n └ <i>" "✅ <b>Добавил</b>\n └ <i>"
+ message.reply_to_message.text.replace("\n", " ") + html.escape(message.reply_to_message.text.replace("\n", " "))
+ "</i>", + "</i>",
) )
else: else:
bot.send_message( bot.send_message(
message.chat.id, message.chat.id,
f"⛔️ <b>Не добавил</b>, есть токое\n └ <i>{message.reply_to_message.text}</i>", f"⛔️ <b>Не добавил</b>, есть токое\n └ <i>{html.escape(message.reply_to_message.text)}</i>",
) )