From 5997438bff49bf08a8d30e49e9348c87de731efc Mon Sep 17 00:00:00 2001
From: Aevann1 <randomname42029@gmail.com>
Date: Mon, 28 Feb 2022 22:14:56 +0200
Subject: [PATCH] t

---
 files/classes/mod_logs.py | 2 +-
 files/helpers/sanitize.py | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/files/classes/mod_logs.py b/files/classes/mod_logs.py
index 3a226ec9d..248314b4d 100644
--- a/files/classes/mod_logs.py
+++ b/files/classes/mod_logs.py
@@ -91,7 +91,7 @@ class ModAction(Base):
 		if self.target_user: return f'<a href="{self.target_user.url}">{self.target_user.username}</a>'
 		elif self.target_post:
 			if self.target_post.club: return f'<a href="{self.target_post.permalink}">{CC} ONLY</a>'
-			return f'<a href="{self.target_post.permalink}">{self.target_post.title.replace("<","").replace(">","")}</a>'
+			return f'<a href="{self.target_post.permalink}">{self.target_post.title_html}</a>'
 		elif self.target_comment_id: return f'<a href="/comment/{self.target_comment_id}?context=8#context">comment</a>'
 
 	@property
diff --git a/files/helpers/sanitize.py b/files/helpers/sanitize.py
index fb1919667..8ab6bbee5 100644
--- a/files/helpers/sanitize.py
+++ b/files/helpers/sanitize.py
@@ -113,7 +113,7 @@ def sanitize(sanitized, noimages=False, alert=False, comment=False, edit=False):
 	
 	sanitized = markdown(sanitized)
 
-	sanitized = sanitized.replace("\ufeff", "").replace("𒐪","").replace("<script","").replace('‎','')
+	sanitized = sanitized.replace("\ufeff", "").replace("𒐪","").replace("<script","").replace("script>","").replace('‎','')
 
 	if alert:
 		for i in re.finditer("<p>@((\w|-){1,25})", sanitized, flags=re.A):
@@ -311,7 +311,7 @@ def filter_emojis_only(title, edit=False, graceful=False):
 	signal.signal(signal.SIGALRM, handler2)
 	signal.alarm(1)
 	
-	title = title.replace('<','&lt;').replace('>','&gt;').replace("\n", "").replace("\r", "").replace("\t", "").strip()
+	title = title.replace("<script","").replace("script>","").replace('<','&lt;').replace('>','&gt;').replace("&", "&amp;").replace('"', '&quot;').replace("'", "&#039;").replace("\ufeff", "").replace("𒐪","").replace('‎','').replace("\n", "").replace("\r", "").replace("\t", "").strip()
 
 	title = bleach.clean(title, tags=[])