Duplicate Post reaction alert contains unexpected "attribute"

Affected version
2.1.6

Kruzya

Well-known member
I reproduced this bug here, on xenforo.com.

When any user reacts your post, XenForo forms "incorrect" HTML code.
From XF\Entity\UserAlert::render() you get HTML like this:
Code:
<a href="/index.php?members/2/" class="username " dir="auto" data-user-id="2" data-xf-init="member-tooltip">member</a> reacted to <a {posterParams}>your post</a> in the thread <a href="/index.php?posts/9/" class="fauxBlockLink-blockLink">Test Telegram Notification</a> with <span class="reaction reaction--small has-reaction reaction--1" data-reaction-id="1"><i aria-hidden="true"></i><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="reaction-sprite js-reaction" alt="Like" title="Like" /> <span class="reaction-text js-reactionText"><bdi>Like</bdi></span></span>.
Note on {posterParams}. This definitely should not be received by the user's browser.

1576768276495.png
 
Top