From 3adbb2ff41240fd82f6cb7182018a921c9c158d1 Mon Sep 17 00:00:00 2001
From: ed <s@ocv.me>
Date: Mon, 24 Feb 2025 23:32:03 +0000
Subject: [PATCH] https://youtu.be/WyXebd3I3Vo

---
 copyparty/web/browser.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/copyparty/web/browser.js b/copyparty/web/browser.js
index c9a8a1c9..47a22d76 100644
--- a/copyparty/web/browser.js
+++ b/copyparty/web/browser.js
@@ -4438,7 +4438,7 @@ function read_dsort(txt) {
 		}
 	}
 	catch (ex) {
-		toast.warn(10, 'failed to apply default sort order [' + txt + ']:\n' + ex);
+		toast.warn(10, 'failed to apply default sort order [' + esc('' + txt) + ']:\n' + ex);
 		dsort = [['href', 1, '']];
 	}
 }
@@ -8379,7 +8379,7 @@ function mk_files_header(taglist) {
 		var tag = taglist[a],
 			c1 = tag.slice(0, 1).toUpperCase();
 
-		tag = c1 + tag.slice(1);
+		tag = esc(c1 + tag.slice(1));
 		if (c1 == '.')
 			tag = '<th name="tags/' + tag + '" sort="int"><span>' + tag.slice(1);
 		else