Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-01-05 15:20:39 +01:00
Code Issues Packages Projects Releases Wiki Activity

escaping message text in parse.raw

Browse Source
This commit is contained in:
Julian Lam
2017-10-26 17:54:55 -04:00
parent a11058bce2
commit 98eddc78cb
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/messaging.js
View File

@@ -78,6 +78,9 @@ Messaging.parse = function (message, fromuid, uid, roomId, isNew, callback) {
return callback(err);
}
parsed = S(parsed).stripTags().decodeHTMLEntities().s;
parsed = validator.escape(String(parsed));
var messageData = {
message: message,
parsed: parsed,