Merge ee920322be into 96b8fe472c

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

web/service/tgbot.go

@@ -8,6 +8,7 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
+	"html"
 	"io"
 	"math/big"
 	"net"
@@ -664,7 +665,7 @@ func (t *Tgbot) answerCommand(message *telego.Message, chatId int64, isAdmin boo
 		msg += t.I18nBot("tgbot.commands.help")
 		msg += t.I18nBot("tgbot.commands.pleaseChoose")
 	case "start":
-		msg += t.I18nBot("tgbot.commands.start", "Firstname=="+message.From.FirstName)
+		msg += t.I18nBot("tgbot.commands.start", "Firstname=="+html.EscapeString(message.From.FirstName))
 		if isAdmin {
 			msg += t.I18nBot("tgbot.commands.welcome", "Hostname=="+hostname)
 		}
@@ -3402,7 +3403,7 @@ func (t *Tgbot) addClient(chatId int64, msg string, messageID ...int) {
 			network, _ := streamSettings["network"].(string)
 			security, _ := streamSettings["security"].(string)
 
-			// Строго: только TCP и только с TLS или REALITY
+			// Strict: only TCP and only with TLS or REALITY
 			if network == "tcp" && (security == "tls" || security == "reality") {
 				canUseFlow = true
 			}