From d5fee22e7a181af4eca8af5be6b4eaf202346735 Mon Sep 17 00:00:00 2001
From: tian <11429339@qq.com>
Date: Fri, 8 May 2026 12:15:07 +0800
Subject: [PATCH] fix: use HTML entities for quotes in onclick

---
 internal/web/ui/templates/face_gallery.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/web/ui/templates/face_gallery.html b/internal/web/ui/templates/face_gallery.html
index fe82523..8f1fe57 100644
--- a/internal/web/ui/templates/face_gallery.html
+++ b/internal/web/ui/templates/face_gallery.html
@@ -35,7 +35,7 @@
       <div style="margin-top:6px;display:flex;justify-content:space-between;align-items:center">
         <div><span style="font-weight:500;font-size:13px">{{.Name}}</span> <span class="muted small">{{.PhotoCount}}张</span></div>
         <div class="actions compact" style="gap:2px">
-          <span class="btn-icon ghost" title="编辑" onclick="showEdit({{.ID}},'{{.Name}}',[{{range $i,$p := .Photos}}{{if $i}},{{end}}'/ui/face-photo/{{$p}}'{{end}}])">&#9998;</span>
+<span class="btn-icon ghost" title="编辑" onclick="showEdit({{.ID}},&#39;{{.Name}}&#39;,[{{range $i,$p := .Photos}}{{if $i}},{{end}}&#39;/ui/face-photo/{{$p}}&#39;{{end}}])">&#9998;</span>
           <form method="post" action="/ui/face-gallery/delete" style="display:inline" onsubmit="return confirm('确定删除 {{.Name}}？')">
             <input type="hidden" name="id" value="{{.ID}}">
             <span class="btn-icon ghost" style="color:var(--danger-soft-text)" title="删除" onclick="this.closest('form').requestSubmit()">&#10005;</span>