From 4183286d5a7892b7bb87ec39e4657580dc2b142f Mon Sep 17 00:00:00 2001
From: Floorb <132411956+Neetpone@users.noreply.github.com>
Date: Wed, 20 Apr 2022 17:19:02 -0400
Subject: [PATCH] Fix paste title XSS.

---
 theme/bulma/view.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/theme/bulma/view.php b/theme/bulma/view.php
index bcc772b..854be89 100644
--- a/theme/bulma/view.php
+++ b/theme/bulma/view.php
@@ -120,7 +120,7 @@ $selectedloader = "$bg[$i]"; // set variable equal to which random filename was
                             </span>
                         </div>
                         <div class="column is-4 has-text-centered">
-                            <h1 class="title is-6" style="margin-bottom:0;"><?= $paste['title'] ?></h1>
+                            <h1 class="title is-6" style="margin-bottom:0;"><?= pp_html_escape($paste->title); ?></h1>
                             <small class="title is-6 has-text-weight-normal has-text-grey">
                                 By <a href="<?= urlForMember($paste->user) ?>"><?= pp_html_escape($paste->user->username) ?></a>
                                 <br/>