diff options
| author | Alexander Strizhakov <alex.strizhakov@gmail.com> | 2020-11-10 10:44:22 +0300 |
|---|---|---|
| committer | Alexander Strizhakov <alex.strizhakov@gmail.com> | 2020-11-10 10:46:57 +0300 |
| commit | 0c68b9ac137e98867cf8aacfef1f264412cc7b3e (patch) | |
| tree | 2ec30536f5d2c0285572fd10b46f076dc7f8248b /lib | |
| parent | db07b538a511b315a3638f3d0b1abfb4877d10c9 (diff) | |
| download | pleroma-0c68b9ac137e98867cf8aacfef1f264412cc7b3e.tar.gz | |
escaping summary and other fields in xml templates
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/pleroma/web/feed/feed_view.ex | 2 | ||||
| -rw-r--r-- | lib/pleroma/web/templates/feed/feed/_activity.atom.eex | 2 | ||||
| -rw-r--r-- | lib/pleroma/web/templates/feed/feed/_activity.rss.eex | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/lib/pleroma/web/feed/feed_view.ex b/lib/pleroma/web/feed/feed_view.ex index 1ae03e7e2..56c024617 100644 --- a/lib/pleroma/web/feed/feed_view.ex +++ b/lib/pleroma/web/feed/feed_view.ex @@ -83,7 +83,7 @@ defmodule Pleroma.Web.Feed.FeedView do def activity_content(_), do: "" - def activity_context(activity), do: activity.data["context"] + def activity_context(activity), do: escape(activity.data["context"]) def attachment_href(attachment) do attachment["url"] diff --git a/lib/pleroma/web/templates/feed/feed/_activity.atom.eex b/lib/pleroma/web/templates/feed/feed/_activity.atom.eex index 78350f2aa..3fd150c4e 100644 --- a/lib/pleroma/web/templates/feed/feed/_activity.atom.eex +++ b/lib/pleroma/web/templates/feed/feed/_activity.atom.eex @@ -12,7 +12,7 @@ <link href="<%= activity_context(@activity) %>" rel="ostatus:conversation"/> <%= if @data["summary"] do %> - <summary><%= @data["summary"] %></summary> + <summary><%= escape(@data["summary"]) %></summary> <% end %> <%= if @activity.local do %> diff --git a/lib/pleroma/web/templates/feed/feed/_activity.rss.eex b/lib/pleroma/web/templates/feed/feed/_activity.rss.eex index a304a16af..42960de7d 100644 --- a/lib/pleroma/web/templates/feed/feed/_activity.rss.eex +++ b/lib/pleroma/web/templates/feed/feed/_activity.rss.eex @@ -12,7 +12,7 @@ <link rel="ostatus:conversation"><%= activity_context(@activity) %></link> <%= if @data["summary"] do %> - <description><%= @data["summary"] %></description> + <description><%= escape(@data["summary"]) %></description> <% end %> <%= if @activity.local do %> |