IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-26 21:27:16 -05:00
Code Issues Packages Projects Releases Wiki Activity

Fix sanitization of smileys like <_< and <3.

Browse Source
This commit is contained in:
Vikhyat Korrapati
2014-01-26 18:38:47 +05:30
parent c930fe41b2
commit fad88c6cf3
2 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/assets/javascripts/discourse/lib/markdown.js
+1
View File
@@ -154,6 +154,7 @@ Discourse.Markdown = {
**/
sanitize: function(text) {
if (!window.html_sanitize) return "";
text = text.replace(/<([^A-Za-z\/]|$)/g, "&lt;$1");
return window.html_sanitize(text, Discourse.Markdown.urlAllowed, Discourse.Markdown.nameIdClassAllowed);
},