fix content not escaping html properly

2025-02-15 02:44:49 +00:00
parent c25e02dee1
commit 64bf39da29
2 changed files with 3 additions and 0 deletions
--- a/changelog.md
+++ b/changelog.md
@@ -1,5 +1,6 @@
 # v0.1.18
 - Update deps
+- Fix content not escaping HTML properly

 # v0.1.17
 - Fix new invite button not working
--- a/lib/memex_web/components/core_components.ex
+++ b/lib/memex_web/components/core_components.ex
@@ -139,6 +139,8 @@ defmodule MemexWeb.CoreComponents do
  defp display_links(record) do
    record
    |> get_content()
+    |> Phoenix.HTML.html_escape()
+    |> Phoenix.HTML.safe_to_string()
    |> replace_hyperlinks(record)
    |> replace_triple_links(record)
    |> replace_double_links(record)