forked from GNUsocial/gnu-social
Remember to purify HTML...
This commit is contained in:
parent
c498db147a
commit
376d545082
@ -814,7 +814,7 @@ class Notice extends Managed_DataObject
|
||||
// Use the local user's shortening preferences, if applicable.
|
||||
$stored->rendered = $actor->isLocal()
|
||||
? $actor->shortenLinks($act->content)
|
||||
: $act->content;
|
||||
: common_purify($act->content);
|
||||
$stored->content = common_strip_html($stored->rendered);
|
||||
|
||||
// Maybe a missing act-time should be fatal if the actor is not local?
|
||||
|
Loading…
Reference in New Issue
Block a user