From 6603790abaa6cf6d3c4826997e6c768c416c0da5 Mon Sep 17 00:00:00 2001
From: ghost <localhost>
Date: Fri, 8 Dec 2023 04:09:38 +0200
Subject: [PATCH] disable markdown as unsafe for remote content without
 additional filters implementation

---
 templates/default/torrent/info.html.twig | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/templates/default/torrent/info.html.twig b/templates/default/torrent/info.html.twig
index c674b7f..a7aadd9 100644
--- a/templates/default/torrent/info.html.twig
+++ b/templates/default/torrent/info.html.twig
@@ -238,7 +238,9 @@
                             {{ 'Source' | trans }}
                         </td>
                         <td>
-                            {{ file.source | url_to_markdown | markdown_to_html }}
+                            {# disable markdown as unsafe for unfiltered content #}
+                            {#{{ file.source | url_to_markdown | markdown_to_html }}#}
+                            {{ file.source }}
                         </td>
                     </tr>
                 {% endif %}
@@ -248,7 +250,9 @@
                             {{ 'Software' | trans }}
                         </td>
                         <td>
-                            {{ file.software | url_to_markdown | markdown_to_html }}
+                            {# disable markdown as unsafe for unfiltered content #}
+                            {#{{ file.software | url_to_markdown | markdown_to_html }}#}
+                            {{ file.software }}
                         </td>
                     </tr>
                 {% endif %}
@@ -258,7 +262,9 @@
                             {{ 'Comment' | trans }}
                         </td>
                         <td>
-                            {{ file.comment | url_to_markdown | markdown_to_html }}
+                            {# disable markdown as unsafe for unfiltered content #}
+                            {#{{ file.comment | url_to_markdown | markdown_to_html }}#}
+                            {{ file.comment }}
                         </td>
                     </tr>
                 {% endif %}