From 29e9e0f2cc9d0d81ef2978c8f9dfc1810588bd0d Mon Sep 17 00:00:00 2001
From: Omar Roth <omarroth@protonmail.com>
Date: Mon, 27 May 2019 08:35:04 -0500
Subject: [PATCH] Provide empty response on 204

---
 src/invidious.cr                        | 4 ++++
 src/invidious/views/authorize_token.ecr | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/invidious.cr b/src/invidious.cr
index b37550e2..a7cd137c 100644
--- a/src/invidious.cr
+++ b/src/invidious.cr
@@ -4473,6 +4473,7 @@ post "/api/v1/auth/preferences" do |env|
   PG_DB.exec("UPDATE users SET preferences = $1 WHERE email = $2", preferences.to_json, user.email)
 
   env.response.status_code = 204
+  ""
 end
 
 get "/api/v1/auth/subscriptions" do |env|
@@ -4521,6 +4522,7 @@ post "/api/v1/auth/subscriptions/:ucid" do |env|
   # YouTube.
 
   env.response.status_code = 204
+  ""
 end
 
 delete "/api/v1/auth/subscriptions/:ucid" do |env|
@@ -4537,6 +4539,7 @@ delete "/api/v1/auth/subscriptions/:ucid" do |env|
   PG_DB.exec("NOTIFY feeds, E'#{payload}'")
 
   env.response.status_code = 204
+  ""
 end
 
 get "/api/v1/auth/tokens" do |env|
@@ -4643,6 +4646,7 @@ post "/api/v1/auth/tokens/unregister" do |env|
   end
 
   env.response.status_code = 204
+  ""
 end
 
 get "/api/manifest/dash/id/videoplayback" do |env|
diff --git a/src/invidious/views/authorize_token.ecr b/src/invidious/views/authorize_token.ecr
index 267f8ad9..53b8f001 100644
--- a/src/invidious/views/authorize_token.ecr
+++ b/src/invidious/views/authorize_token.ecr
@@ -39,7 +39,7 @@
                 <div class="pure-u-1">
                     <ul>
                         <% scopes.each do |scope| %>
-                            <li><%= scope %></li>
+                            <li><%= HTML.escape(scope) %></li>
                         <% end %>
                     </ul>
                 </div>