Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-01-08 16:42:48 +01:00
Code Issues Packages Projects Releases Wiki Activity

escape title in post queue

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2018-09-04 09:39:08 -04:00
parent f51b2e07f4
commit 3e1b007f9f
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/controllers/admin/postqueue.js
View File

@@ -1,6 +1,7 @@
'use strict';
var async = require('async');
var validator = require('validator');
var db = require('../../database');
var user = require('../../user');
@@ -81,6 +82,7 @@ function getQueuedPosts(ids, callback) {
async.map(postData, function (postData, next) {
postData.data.rawContent = postData.data.content;
postData.data.title = validator.escape(String(postData.data.title));
async.waterfall([
function (next) {
if (postData.data.cid) {