KevaChat/webapp
1
0
Fork 0
mirror of https://github.com/kevachat/webapp.git synced 2025-02-08 21:04:17 +00:00
Code Issues Projects Releases Wiki Activity

apply markdown whitelist filters only to prevent ping from remote includes

Browse Source
This commit is contained in:
ghost 2023-12-08 20:22:10 +02:00
parent f9c98deebc
commit c16c071952
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
templates/default/room/index.html.twig
View File

@ -34,13 +34,16 @@
</svg> </svg>
</span> </span>
{% endif %} {% endif %}
{# markdown filter enabled could deanon chat users by external image request, disabled
<br /> <br />
{{ post.message | message_to_markdown | markdown_to_html }} {# apply markdown whitelist filters only to prevent ping from remote includes #}
#} {{
<p> post.message | trim
{{ post.message | trim | nl2br }} | striptags
</p> | markdown_to_html
| striptags
| message_to_markdown
| markdown_to_html
}}
</li> </li>
{% endfor %} {% endfor %}
</ul> </ul>