From 5668ce1ec701ed12eb099020e8a322de08e6f810 Mon Sep 17 00:00:00 2001 From: tobi <31960611+tsmethurst@users.noreply.github.com> Date: Thu, 26 May 2022 11:37:13 +0200 Subject: [bugfix] Fix HTML escaping in instance title (#607) * move caption sanitization -> sanitize.go * use sanitizeplaintext rather than removehtml * rename sanitizecaption to sanitizeplaintext * avoid removing html twice from statuses * unexport remoteHTML it's no longer used outside the text package so this makes it less confusing * test instance PATCH --- internal/processing/admin/createdomainblock.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'internal/processing/admin') diff --git a/internal/processing/admin/createdomainblock.go b/internal/processing/admin/createdomainblock.go index 3cfaabce0..1c641950c 100644 --- a/internal/processing/admin/createdomainblock.go +++ b/internal/processing/admin/createdomainblock.go @@ -59,8 +59,8 @@ func (p *processor) DomainBlockCreate(ctx context.Context, account *gtsmodel.Acc ID: blockID, Domain: domain, CreatedByAccountID: account.ID, - PrivateComment: text.RemoveHTML(privateComment), - PublicComment: text.RemoveHTML(publicComment), + PrivateComment: text.SanitizePlaintext(privateComment), + PublicComment: text.SanitizePlaintext(publicComment), Obfuscate: obfuscate, SubscriptionID: subscriptionID, } -- cgit v1.2.3