From 3c1797afef4375a81e707541af128d105d88426c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lera=20Elvo=C3=A9?= <yagich@poto.cafe>
Date: Wed, 30 Jul 2025 18:47:58 +0300
Subject: [PATCH] properly escape alt in img tag

---
 app/lib/babycode.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/lib/babycode.py b/app/lib/babycode.py
index 1aa02c6..206c3d6 100644
--- a/app/lib/babycode.py
+++ b/app/lib/babycode.py
@@ -20,7 +20,7 @@ TAGS = {
     "b": lambda children, attr: f"<strong>{children}</strong>",
     "i": lambda children, attr: f"<em>{children}</em>",
     "s": lambda children, attr: f"<del>{children}</del>",
-    "img": lambda children, attr: f"<div class=\"post-img-container\"><img class=\"block-img\" src={attr} alt={children}></div>",
+    "img": lambda children, attr: f"<div class=\"post-img-container\"><img class=\"block-img\" src=\"{attr}\" alt=\"{children}\"></div>",
     "url": lambda children, attr: f"<a href={attr}>{children}</a>",
     "quote": lambda children, attr: f"<blockquote>{children}</blockquote>",
     "code": tag_code,