diff options
Diffstat (limited to 'internal/processing/status/util.go')
| -rw-r--r-- | internal/processing/status/util.go | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/internal/processing/status/util.go b/internal/processing/status/util.go index 0a023eab6..eb83babb0 100644 --- a/internal/processing/status/util.go +++ b/internal/processing/status/util.go @@ -264,6 +264,10 @@ func (p *processor) processContent(form *apimodel.AdvancedStatusCreateForm, acco // replace newlines with breaks content = strings.ReplaceAll(content, "\n", "<br />") - status.Content = content + // sanitize html to remove any dodgy scripts or other disallowed elements + clean := util.SanitizeHTML(content) + + // set the content as the shiny clean parsed content + status.Content = clean return nil } |