diff options
author | 2022-05-26 11:37:13 +0200 | |
---|---|---|
committer | 2022-05-26 11:37:13 +0200 | |
commit | 5668ce1ec701ed12eb099020e8a322de08e6f810 (patch) | |
tree | f056890ae94f464176750be17b06292c5b9160d7 /internal/processing/media/update.go | |
parent | [security] Set SameSite to `strict` instead of browser default (#606) (diff) | |
download | gotosocial-5668ce1ec701ed12eb099020e8a322de08e6f810.tar.xz |
[bugfix] Fix HTML escaping in instance title (#607)
* move caption sanitization -> sanitize.go
* use sanitizeplaintext rather than removehtml
* rename sanitizecaption to sanitizeplaintext
* avoid removing html twice from statuses
* unexport remoteHTML
it's no longer used outside the text package so this
makes it less confusing
* test instance PATCH
Diffstat (limited to 'internal/processing/media/update.go')
-rw-r--r-- | internal/processing/media/update.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/internal/processing/media/update.go b/internal/processing/media/update.go index b275b9ffe..116588a48 100644 --- a/internal/processing/media/update.go +++ b/internal/processing/media/update.go @@ -45,7 +45,7 @@ func (p *processor) Update(ctx context.Context, account *gtsmodel.Account, media } if form.Description != nil { - attachment.Description = text.SanitizeCaption(*form.Description) + attachment.Description = text.SanitizePlaintext(*form.Description) if err := p.db.UpdateByPrimaryKey(ctx, attachment); err != nil { return nil, gtserror.NewErrorInternalError(fmt.Errorf("database error updating description: %s", err)) } |