friendica-github/view/theme/frio/templates/photo_top.tpl

<a href="{{$photo.link}}" id="photo-top-photo-link-{{$photo.id}}" title="{{$photo.title|escape}}">
	<img src="{{$photo.src}}" alt="{{if $photo.album.name}}{{$photo.album.name|escape}}{{elseif $photo.desc}}{{$photo.desc|escape}}{{elseif $photo.alt}}{{$photo.alt|escape}}{{else}}{{$photo.unknown|escape}}{{/if}}" title="{{$photo.title|escape}}" id="photo-top-photo-{{$photo.id}}" />
</a>
Much more escapes 2018-11-25 20:34:02 +00:00			`<a href="{{$photo.link}}" id="photo-top-photo-link-{{$photo.id}}" title="{{$photo.title\|escape}}">`
We are now escaping many template fields 2018-11-25 18:56:26 +00:00			`<img src="{{$photo.src}}" alt="{{if $photo.album.name}}{{$photo.album.name\|escape}}{{elseif $photo.desc}}{{$photo.desc\|escape}}{{elseif $photo.alt}}{{$photo.alt\|escape}}{{else}}{{$photo.unknown\|escape}}{{/if}}" title="{{$photo.title\|escape}}" id="photo-top-photo-{{$photo.id}}" />`
first files - move to Version 0.1 2016-03-28 14:29:05 +00:00			`</a>`