From 9c70265a9a8847ac6b66e611849e78f2a14a2368 Mon Sep 17 00:00:00 2001
From: Fijxu <fijxu@nadeko.net>
Date: Mon, 3 Aug 2026 15:24:47 -0400
Subject: [PATCH] fix: add missing `HTML.escape` call for commit 4501c9d

---
 src/invidious/views/watch.ecr | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/invidious/views/watch.ecr b/src/invidious/views/watch.ecr
index ec8c5a98..8ba222e7 100644
--- a/src/invidious/views/watch.ecr
+++ b/src/invidious/views/watch.ecr
@@ -328,7 +328,7 @@ we're going to need to do it here in order to allow for translations.
                                 <%= comment_html %>
                             <% else %>
                                 <a href="/watch?<%= env.params.query %>&nojs=1">
-                                    <%= I18n.translate(locale, "comments_youtube_disabled_try_reddit_no_js") %>
+                                    <%= HTML.escape(I18n.translate(locale, "comments_youtube_disabled_try_reddit_no_js")) %>
                                 </a>
                             <% end %>
                         </noscript>