Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 16:46:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: escape thumbs, allow robots meta tag

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2021-10-07 15:20:41 -04:00
parent b0eb2aed0e
commit 4f9717fb08
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
public/src/ajaxify.js
View File

@@ -223,7 +223,7 @@ ajaxify = window.ajaxify || {};
} }
function updateTags() { function updateTags() {
var metaWhitelist = ['title', 'description', /og:.+/, /article:.+/].map(function (val) { var metaWhitelist = ['title', 'description', /og:.+/, /article:.+/, 'robots'].map(function (val) {
return new RegExp(val); return new RegExp(val);
}); });
var linkWhitelist = ['canonical', 'alternate', 'up']; var linkWhitelist = ['canonical', 'alternate', 'up'];

3
src/topics/thumbs.js
View File

@@ -64,7 +64,8 @@ async function getThumbs(set) {
if (cached !== undefined) { if (cached !== undefined) {
return cached.slice(); return cached.slice();
} }
const thumbs = await db.getSortedSetRange(set, 0, -1); let thumbs = await db.getSortedSetRange(set, 0, -1);
thumbs = thumbs.map(t => validator.escape(String(t)));
cache.set(set, thumbs); cache.set(set, thumbs);
return thumbs.slice(); return thumbs.slice();
} }