From 859542013996330289e04c60a539ea87268bb22e Mon Sep 17 00:00:00 2001
From: NetworkCats <networkcatlol@gmail.com>
Date: Sat, 7 Mar 2026 20:16:49 +0800
Subject: [PATCH] fix: prevent DOM text reinterpretation as HTML in lang select

---
 templates/_footer_lang.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/_footer_lang.html b/templates/_footer_lang.html
index b45e354..5eafc9f 100644
--- a/templates/_footer_lang.html
+++ b/templates/_footer_lang.html
@@ -1,6 +1,6 @@
 <div class="footer-lang">
   <label for="lang-select" class="sr-only">{{ t_language }}</label>
-  <select id="lang-select" class="lang-select" autocomplete="off" onchange="if(this.value)window.location.href=this.value+window.location.search">
+  <select id="lang-select" class="lang-select" autocomplete="off" onchange="if(this.value){var u=new URL(this.value,window.location.origin);u.search=window.location.search;window.location.href=u.href}">
     {% for l in all_locales %}
     <option value="/{{ l.tag() }}"{% if *l == locale %} selected{% endif %}>{{ l.name() }}</option>
     {% endfor %}