From 9bb8ec0b660394c88d2367075baa47ee0c021b2c Mon Sep 17 00:00:00 2001
From: Cutls <web-pro@cutls.com>
Date: Fri, 19 Apr 2019 23:02:30 +0900
Subject: [PATCH] some security update

---
 app/js/tl/poll.js      | 2 +-
 app/view/en/index.html | 2 +-
 app/view/ja/index.html | 2 +-
 app/view/ps/index.html | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/app/js/tl/poll.js b/app/js/tl/poll.js
index 394579d2..8803a10c 100644
--- a/app/js/tl/poll.js
+++ b/app/js/tl/poll.js
@@ -108,7 +108,7 @@ function voteMastodonrefresh(acct_id,id){
 				if(!json.voted){
 					votesel='voteSelMastodon(\''+acct_id+'\',\''+json.id+'\','+keyc+','+json.multiple+')';
 				}
-				poll=poll+'<div class="pointer vote vote_'+acct_id+'_'+json.id+'_'+keyc+'" onclick="'+votesel+'">'+choice.title+'<span class="vote_'+acct_id+'_'+json.id+'_result '+result_hide+'">('+choice.votes_count+')</span></div>';
+				poll=poll+'<div class="pointer vote vote_'+acct_id+'_'+json.id+'_'+keyc+'" onclick="'+votesel+'">'+escapeHTML(choice.title)+'<span class="vote_'+acct_id+'_'+json.id+'_result '+result_hide+'">('+choice.votes_count+')</span></div>';
 			});
 			poll=poll+myvote+'<span class="cbadge cbadge-hover" title="' + date(json.expires_at, 'absolute') +
 			'"><i class="far fa-calendar-times"></i>' +
diff --git a/app/view/en/index.html b/app/view/en/index.html
index a07505f2..d5e8dceb 100644
--- a/app/view/en/index.html
+++ b/app/view/en/index.html
@@ -32,7 +32,7 @@
 <script type="text/javascript" src="../../js/common/modal.js"></script>
 <script type="text/javascript" src="../../js/ui/jquery-ui.min.js"></script>
 <script>
-var ver="Usamin (18.2.3)";
+var ver="Usamin (18.3.0)";
 //betaを入れるとバージョンチェックしない
 //GitHubに上げるときはindex.htmlをちゃんとする。(index.start.html)
 //var ver="beta";
diff --git a/app/view/ja/index.html b/app/view/ja/index.html
index 3499edb5..f4018f21 100644
--- a/app/view/ja/index.html
+++ b/app/view/ja/index.html
@@ -32,7 +32,7 @@
 <script type="text/javascript" src="../../js/common/modal.js"></script>
 <script type="text/javascript" src="../../js/ui/jquery-ui.min.js"></script>
 <script>
-var ver="Usamin (18.2.3)";
+var ver="Usamin (18.3.0)";
 //betaを入れるとバージョンチェックしない
 //GitHubに上げるときはindex.htmlをちゃんとする。(index.start.html)
 //var ver="beta";
diff --git a/app/view/ps/index.html b/app/view/ps/index.html
index 3c490b8a..a41e3df2 100644
--- a/app/view/ps/index.html
+++ b/app/view/ps/index.html
@@ -32,7 +32,7 @@
 <script type="text/javascript" src="../../js/common/modal.js"></script>
 <script type="text/javascript" src="../../js/ui/jquery-ui.min.js"></script>
 <script>
-var ver="Usamin (18.2.3)";
+var ver="Usamin (18.3.0)";
 //betaを入れるとバージョンチェックしない
 //GitHubに上げるときはindex.htmlをちゃんとする。(index.start.html)
 //var ver="beta";