Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 08:36:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: escape thumbs, allow robots meta tag

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2021-10-07 15:20:41 -04:00
parent b0eb2aed0e
commit 4f9717fb08
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
public/src/ajaxify.js
View File

@@ -223,7 +223,7 @@ ajaxify = window.ajaxify || {};
}
function updateTags() {
var metaWhitelist = ['title', 'description', /og:.+/, /article:.+/].map(function (val) {
var metaWhitelist = ['title', 'description', /og:.+/, /article:.+/, 'robots'].map(function (val) {
return new RegExp(val);
});
var linkWhitelist = ['canonical', 'alternate', 'up'];

3
src/topics/thumbs.js
View File

@@ -64,7 +64,8 @@ async function getThumbs(set) {
if (cached !== undefined) {
return cached.slice();
}
const thumbs = await db.getSortedSetRange(set, 0, -1);
let thumbs = await db.getSortedSetRange(set, 0, -1);
thumbs = thumbs.map(t => validator.escape(String(t)));
cache.set(set, thumbs);
return thumbs.slice();
}