Sanitize html when linkifying plain text.

2024-02-03 11:15:57 -08:00 · 2024-02-03 11:15:57 -08:00 · 0f1a60a348
commit 0f1a60a348
parent c59a883351
1 changed files with 1 additions and 1 deletions
--- a/server/src/graphql.rs
+++ b/server/src/graphql.rs
@ -350,7 +350,7 @@ impl QueryRoot {
                Body::PlainText(PlainText { text, content_tree }) => Body::Html(Html {
                    html: format!(
                        r#"<p class="view-part-text-plain">{}</p>"#,
-                        linkify_html(&text)
+                        sanitize_html(&linkify_html(&text))?
                    ),
                    content_tree: if debug_content_tree {
                        render_content_type_tree(&m)