Duplicate Post reaction alert contains unexpected "attribute"

[Kruzya]

Affected version

2.1.6

I reproduced this bug here, on xenforo.com.

When any user reacts your post, XenForo forms "incorrect" HTML code.
From XF\Entity\UserAlert::render() you get HTML like this:

<a href="/index.php?members/2/" class="username " dir="auto" data-user-id="2" data-xf-init="member-tooltip">member</a> reacted to <a {posterParams}>your post</a> in the thread <a href="/index.php?posts/9/" class="fauxBlockLink-blockLink">Test Telegram Notification</a> with <span class="reaction reaction--small has-reaction reaction--1" data-reaction-id="1"><i aria-hidden="true"></i><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="reaction-sprite js-reaction" alt="Like" title="Like" /> <span class="reaction-text js-reactionText"><bdi>Like</bdi></span></span>.

Note on {posterParams}. This definitely should not be received by the user's browser.

 

[Paul B]

This has already been reported.

Fixed - 'Your post' links under alert pages are unclickable

This bug fix introduced this bug.

xenforo.com