From 5668ce1ec701ed12eb099020e8a322de08e6f810 Mon Sep 17 00:00:00 2001 From: tobi <31960611+tsmethurst@users.noreply.github.com> Date: Thu, 26 May 2022 11:37:13 +0200 Subject: [bugfix] Fix HTML escaping in instance title (#607) * move caption sanitization -> sanitize.go * use sanitizeplaintext rather than removehtml * rename sanitizecaption to sanitizeplaintext * avoid removing html twice from statuses * unexport remoteHTML it's no longer used outside the text package so this makes it less confusing * test instance PATCH --- internal/processing/account/update.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'internal/processing/account/update.go') diff --git a/internal/processing/account/update.go b/internal/processing/account/update.go index 3d6bbae2a..5fae6e73b 100644 --- a/internal/processing/account/update.go +++ b/internal/processing/account/update.go @@ -53,7 +53,7 @@ func (p *processor) Update(ctx context.Context, account *gtsmodel.Account, form if err := validate.DisplayName(*form.DisplayName); err != nil { return nil, err } - account.DisplayName = text.RemoveHTML(*form.DisplayName) + account.DisplayName = text.SanitizePlaintext(*form.DisplayName) } if form.Note != nil { -- cgit v1.2.3