From 1a3b099442f358d8612fbbc00ea13acb6d515261 Mon Sep 17 00:00:00 2001
From: James Hunt <10615884+thetwopct@users.noreply.github.com>
Date: Tue, 21 May 2024 15:34:04 +0700
Subject: [PATCH] #45 Escape alt and title tags properly

Signed-off-by: James Hunt <10615884+thetwopct@users.noreply.github.com>

Signed-off-by: James Hunt <10615884+thetwopct@users.noreply.github.com>
---
 layouts/partials/footer.html              | 2 +-
 layouts/partials/footer/social-links.html | 2 +-
 layouts/partials/header.html              | 2 +-
 layouts/shortcodes/img.html               | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/layouts/partials/footer.html b/layouts/partials/footer.html
index a24f8cb..d6ccc99 100644
--- a/layouts/partials/footer.html
+++ b/layouts/partials/footer.html
@@ -58,7 +58,7 @@
         <div class="footer__logo-social-wrapper">
             {{ with .Site.Params.logo_on_black }}
             <a class="logo-link" href="{{ "/" | absLangURL }}">
-                <img loading="lazy" class="logo" width="150" height="40" src="{{ . | absURL }}" alt="{{ $.Site.Title }}"></a>
+                <img loading="lazy" class="logo" width="150" height="40" src="{{ . | absURL }}" alt="{{ $.Site.Title | safeHTMLAttr }}"></a>
             {{ end }}
 
             {{- partial "footer/social-links.html" . -}}
diff --git a/layouts/partials/footer/social-links.html b/layouts/partials/footer/social-links.html
index 85c0605..1e0e7cb 100644
--- a/layouts/partials/footer/social-links.html
+++ b/layouts/partials/footer/social-links.html
@@ -13,7 +13,7 @@
         {{ range $validLinks }}
         <li>
             <a href="{{ .value }}" title="{{ i18n "social_link_title" (dict "SiteTitle" $siteTitle "Network" (humanize .key)) | default (printf "%s on %s" $siteTitle (humanize .key)) }}">
-                <img loading="lazy" width="31" height="31" src="{{ printf "/img/social-icons/%s.svg" .key }}" alt="{{ (humanize .key) }} Icon">
+                <img loading="lazy" width="31" height="31" src="{{ printf "/img/social-icons/%s.svg" .key }}" alt="{{ (humanize .key) | safeHTMLAttr }} icon">
             </a>
         </li>
         {{ end }}
diff --git a/layouts/partials/header.html b/layouts/partials/header.html
index 635fb71..75fa418 100644
--- a/layouts/partials/header.html
+++ b/layouts/partials/header.html
@@ -7,7 +7,7 @@
 
         {{ with .Site.Params.logo_on_white }}
         <a class="logo-link" href="{{ "/" | absLangURL }}">
-            <img class="logo" width="150" height="40" src="{{ . | absURL }}" alt="{{ $.Site.Title }}">
+            <img class="logo" width="150" height="40" src="{{ . | absURL }}" alt="{{ $.Site.Title | safeHTMLAttr }}">
         </a>
         {{ else }}
         <a class="site-title-link" href="{{ "/" | absLangURL }}">
diff --git a/layouts/shortcodes/img.html b/layouts/shortcodes/img.html
index 11af7ed..71f13ef 100644
--- a/layouts/shortcodes/img.html
+++ b/layouts/shortcodes/img.html
@@ -37,7 +37,7 @@
         src="{{ $src }}"
         width="{{ $width }}"
         height="{{ $height }}"
-        alt="{{ $alt }}"
+        alt="{{ $alt | safeHTMLAttr }}"
         loading="{{ $loading }}"
         >
   {{ if $caption}}