From c3cbda9caa104972993dba0eeb6d3738dd141c88 Mon Sep 17 00:00:00 2001
From: wopsononock <16406238+wopsononock@users.noreply.github.com>
Date: Fri, 4 Sep 2026 17:47:00 -0400
Subject: [PATCH] Sanitization changes

---
 templates/blockDoi.tpl        | 4 ++--
 templates/blockReferences.tpl | 4 ++--
 templates/displayInline.tpl   | 6 +++---
 version.xml                   | 4 ++--
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/templates/blockDoi.tpl b/templates/blockDoi.tpl
index 49d1eb6..29f982a 100644
--- a/templates/blockDoi.tpl
+++ b/templates/blockDoi.tpl
@@ -20,8 +20,8 @@
 				{capture assign=translatedDoi}{translate key="doi.readerDisplayName"}{/capture}
 				<strong>{translate key="semicolon" label=$translatedDoi}</strong>
 				<a href="{$doiUrl}">
-					{$doi}
+					{$doi|escape}
 				</a>
 			</div>
 		{/if}	
-</div>
\ No newline at end of file
+</div>
diff --git a/templates/blockReferences.tpl b/templates/blockReferences.tpl
index 330a628..96d9cc5 100644
--- a/templates/blockReferences.tpl
+++ b/templates/blockReferences.tpl
@@ -19,9 +19,9 @@
 						<p>{$parsedCitation->getCitationWithLinks()|strip_unsafe_html} {call_hook name="Templates::Article::Details::Reference" citation=$parsedCitation}</p>
 					{/foreach}
 				{else}
-					{$publication->getData('citationsRaw')|nl2br}
+					{$publication->getData('citationsRaw')|escape|nl2br}
 				{/if}
 			</div>
 		</div>
 	</div>
-{/if}
\ No newline at end of file
+{/if}
diff --git a/templates/displayInline.tpl b/templates/displayInline.tpl
index 579202c..1d15262 100644
--- a/templates/displayInline.tpl
+++ b/templates/displayInline.tpl
@@ -16,7 +16,7 @@
  * @uses $supplementaryGalleys array List of article galleys that are supplementary
  * @uses $inlineHtmlGalley string The HTML content of the Article Galley
  *}
-{include file="frontend/components/header.tpl" pageTitleTranslated=$publication->getLocalizedFullTitle(null, 'html')|strip_unsafe_html|escape}
+{include file="frontend/components/header.tpl" pageTitleTranslated=$publication->getLocalizedFullTitle(null, 'html')|strip_unsafe_html}
 
 <div class="page page_article">
 	{if $section}
@@ -30,10 +30,10 @@
 
 	<header>
 		<h1 class="page-header">
-			{$publication->getLocalizedTitle(null, 'html')|strip_unsafe_html|escape}
+			{$publication->getLocalizedTitle(null, 'html')|strip_unsafe_html}
 			{if $publication->getLocalizedData('subtitle')}
 				<small>
-					{$publication->getLocalizedSubTitle(null, 'html')|strip_unsafe_html|escape}
+					{$publication->getLocalizedSubTitle(null, 'html')|strip_unsafe_html}
 				</small>
 			{/if}
 		</h1>
diff --git a/version.xml b/version.xml
index 1b92da7..ce59f89 100644
--- a/version.xml
+++ b/version.xml
@@ -14,8 +14,8 @@
 <version>
 	<application>inlineHtmlGalley</application>
 	<type>plugins.generic</type>
-	<release>1.4.0.0</release>
-	<date>2026-08-20</date>
+	<release>1.4.0.1</release>
+	<date>2026-09-04</date>
 	<lazy-load>1</lazy-load>
 	<class>InlineHtmlGalleyPlugin</class>
 </version>