From d247ad11eca08cdcaa5352846532fc5b99462895 Mon Sep 17 00:00:00 2001
From: lalka2016 <99399973+lalka2016@users.noreply.github.com>
Date: Sun, 23 Jul 2023 20:13:17 +0300
Subject: [PATCH] pheecks ksss

---
 Web/Presenters/templates/Group/View.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Web/Presenters/templates/Group/View.xml b/Web/Presenters/templates/Group/View.xml
index 7e120ba0..9b4a049e 100644
--- a/Web/Presenters/templates/Group/View.xml
+++ b/Web/Presenters/templates/Group/View.xml
@@ -134,7 +134,7 @@
             <script>
                 function banClub() {
                     let name = {$club->getName()}
-                    let body = tr("ban_group_desc", {$club->getName()})
+                    let body = tr("ban_group_desc", escapeHtml(name))
                     let num  = {$club->getId()}
                     body += `
                         <br>
@@ -143,7 +143,7 @@
                         <br><input type="checkbox" value="1" id="unsub_everyone" name="unsub_everyone"><label for="unsub_everyone"> ` + tr('unsubscribe_everyoune') + `</label>`
                     
 
-                    MessageBox({_ban_group} + " " + {$club->getName()}, body, [{_ok}, {_cancel}], [
+                    MessageBox({_ban_group} + " " + escapeHtml(name), body, [{_ok}, {_cancel}], [
                         (function() {
                             let xhr = new XMLHttpRequest()
                             xhr.open("POST", "/admin/clubs/id" + num + "/ban" + "?hash=" + {rawurlencode($csrfToken)}, true);