Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-01-03 06:10:38 +01:00
Code Issues Packages Projects Releases Wiki Activity

escape teaser content

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2017-08-16 12:32:06 -04:00
parent 8ff9fe34ee
commit df069ee78d
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/messaging.js
View File

@@ -3,6 +3,7 @@
var async = require('async');
var S = require('string');
var validator = require('validator');
var db = require('./database');
var user = require('./user');
@@ -211,6 +212,7 @@ Messaging.getTeaser = function (uid, roomId, callback) {
}
if (teaser.content) {
teaser.content = S(teaser.content).stripTags().decodeHTMLEntities().s;
teaser.content = validator.escape(String(teaser.content));
}
teaser.timestampISO = utils.toISOString(teaser.timestamp);