Fix HTML escaping issue for movie titles with special characters#525
Merged
Arrowar merged 6 commits intoArrowar:devfrom Feb 8, 2026
Merged
Fix HTML escaping issue for movie titles with special characters#525Arrowar merged 6 commits intoArrowar:devfrom
Arrowar merged 6 commits intoArrowar:devfrom
Conversation
added 6 commits
February 8, 2026 19:56
- STACK.md - Technologies and dependencies - ARCHITECTURE.md - System design and patterns - STRUCTURE.md - Directory layout - CONVENTIONS.md - Code style and patterns - TESTING.md - Test structure - INTEGRATIONS.md - External services - CONCERNS.md - Technical debt and issues
Define project vision, requirements (19 v1 + 6 v2), and 5-phase roadmap for building a cross-platform Electron GUI backed by FastAPI.
Remove |safe filter from item_payload hidden input to prevent
broken JSON payloads when movie titles contain quotes or accents.
The |safe filter prevented Django from HTML-escaping special characters,
which broke the HTML attribute parsing when titles contained single
quotes (e.g., "Lo chiamavano Trinità"). This caused "invalid payload"
errors when attempting to download such movies.
With auto-escaping:
- HTML source: {"name": "Trinità"} (safe)
- Browser displays: {"name": "Trinità"}
- Form submits: original text (valid JSON)
Fixes Arrowar#1
Arrowar
added a commit
that referenced
this pull request
Feb 14, 2026
* Fix #523 * Add option subtitle merging (#521) * Add option subtitle merging * Update dash.py * Remove blank line in hls.py before console print Removed unnecessary blank line before console print statement. --------- Co-authored-by: buspo <paolo@buso.it> * Fix scrape_serie=None * Fix HTML escaping issue for movie titles with special characters (#525) * docs: map existing codebase - STACK.md - Technologies and dependencies - ARCHITECTURE.md - System design and patterns - STRUCTURE.md - Directory layout - CONVENTIONS.md - Code style and patterns - TESTING.md - Test structure - INTEGRATIONS.md - External services - CONCERNS.md - Technical debt and issues * [GSD] Initialize project: StreamingCommunity Electron GUI Define project vision, requirements (19 v1 + 6 v2), and 5-phase roadmap for building a cross-platform Electron GUI backed by FastAPI. * Fix HTML escaping issue for movie titles with special characters Remove |safe filter from item_payload hidden input to prevent broken JSON payloads when movie titles contain quotes or accents. The |safe filter prevented Django from HTML-escaping special characters, which broke the HTML attribute parsing when titles contained single quotes (e.g., "Lo chiamavano Trinità"). This caused "invalid payload" errors when attempting to download such movies. With auto-escaping: - HTML source: {"name": "Trinità"} (safe) - Browser displays: {"name": "Trinità"} - Form submits: original text (valid JSON) Fixes #1 * ignored local planning and coding files (gsd, serena, other artifacts) * removed planning files from git * better ignores --------- Co-authored-by: tcsenpai <tcsenpai@discus.sh> * Delete conf * [FFMPEG] Add log * Delete conf directory * Add Conf * Shit fix for Prime sub ttml to srt * Good fix for prime sub: m4s -> ttml -> srt * Re add pycryptodomex * Add fuzzy sorting for media items * Add dv codec * Fix font linux * [GUI] Fix hook pre post * Remove altadefinizione * Fix signal handling to ensure proper shutdown * aggiunto download stagioni, fix menu su mobile + fix visulizzazione serie (#530) * aggiunto download stagioni, fix menu su mobile + fix visulizzazione serie * fix docker * aggiunto tasto watchlist alla pagina dei risultati di ricerca * fix pulsante kill su mobile + aggiunto pulsante per eliminare cronologia download * fix * fix clear history * back to first version clear history * fixato tasto kill nei film, corretta colonna completato su mobile * Remove ensure_complete_item * Add plex * Add channel codec * aggiunta watchlist film (#532) * Fix #533 * seguire una stagione e scaricarla in automatico (#531) * 1st controllare stagione in automatico * better graphic * fix migration * no autodownload for movies * add ism --------- Co-authored-by: buspo <115147481+buspo@users.noreply.github.com> Co-authored-by: buspo <paolo@buso.it> Co-authored-by: TheCookingSenpai <153772003+tcsenpai@users.noreply.github.com> Co-authored-by: tcsenpai <tcsenpai@discus.sh> Co-authored-by: sunrisecpu <sunrisecpu@gmail.com> Co-authored-by: mr-brune <49653622+mr-brune@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Remove |safe filter from item_payload hidden input to prevent
broken JSON payloads when movie titles contain quotes or accents.
The |safe filter prevented Django from HTML-escaping special characters,
which broke the HTML attribute parsing when titles contained single
quotes (e.g., "Lo chiamavano Trinità"). This caused "invalid payload"
errors when attempting to download such movies.
With auto-escaping: