diff --git a/server/api/api/v1/accounts/update_credentials/index.ts b/server/api/api/v1/accounts/update_credentials/index.ts index c7a0a100..46578ed4 100644 --- a/server/api/api/v1/accounts/update_credentials/index.ts +++ b/server/api/api/v1/accounts/update_credentials/index.ts @@ -3,7 +3,6 @@ import { convertTextToHtml } from "@formatting"; import { errorResponse, jsonResponse } from "@response"; import { sanitizeHtml } from "@sanitization"; import ISO6391 from "iso-639-1"; -import { sanitize } from "isomorphic-dompurify"; import { MediaBackendType } from "media-manager"; import type { MediaBackend } from "media-manager"; import { client } from "~database/datasource"; @@ -60,11 +59,11 @@ export default apiRoute<{ const sanitizedNote = await sanitizeHtml(note ?? ""); - const sanitizedDisplayName = sanitize(display_name ?? "", { + const sanitizedDisplayName = display_name ?? ""; /* sanitize(display_name ?? "", { ALLOWED_TAGS: [], ALLOWED_ATTR: [], }); - + */ /* if (!user.source) { user.source = { privacy: "public", diff --git a/utils/sanitization.ts b/utils/sanitization.ts index 5aa6495a..a1a57710 100644 --- a/utils/sanitization.ts +++ b/utils/sanitization.ts @@ -1,8 +1,10 @@ import { config } from "config-manager"; -import { sanitize } from "isomorphic-dompurify"; +// import { sanitize } from "isomorphic-dompurify"; export const sanitizeHtml = async (html: string) => { - const sanitizedHtml = sanitize(html, { + // TEMP: Allow all tags and attributes + return html; + /* const sanitizedHtml = sanitize(html, { ALLOWED_TAGS: [ "a", "p", @@ -70,5 +72,5 @@ export const sanitizeHtml = async (html: string) => { }, }) .transform(new Response(sanitizedHtml)) - .text(); + .text(); */ };