From 8b0ccc80902e1895dbf3a5fdad7a3697e036498e Mon Sep 17 00:00:00 2001
From: Julian Lam <julian@nodebb.org>
Date: Wed, 14 Feb 2024 22:53:27 -0500
Subject: [PATCH] fix: sanitize post remote post content regardless

---
 src/posts/parse.js | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/posts/parse.js b/src/posts/parse.js
index 1435b68da7..803df00e3e 100644
--- a/src/posts/parse.js
+++ b/src/posts/parse.js
@@ -63,6 +63,8 @@ module.exports = function (Posts) {
 
 		if (!activitypub.helpers.isUri(postData.pid) || postData.hasOwnProperty('sourceContent')) {
 			({ postData } = await plugins.hooks.fire('filter:parse.post', { postData }));
+		} else {
+			postData.content = await Posts.sanitize(postData.content);
 		}
 		postData.content = translator.escape(postData.content);
 		if (postData.pid) {