versia-pub/server
2
0
Fork 0
mirror of https://github.com/versia-pub/server.git synced 2025-12-06 16:38:19 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

temporarily disable sanitization

Browse source
This commit is contained in:
Jesse Wierzbinski 2024-04-07 04:05:06 -10:00
parent 36671b68b0
commit e72a4e76d6
No known key found for this signature in database
2 changed files with 7 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
server/api/api/v1/accounts/update_credentials/index.ts
View file

@ -3,7 +3,6 @@ import { convertTextToHtml } from "@formatting";
import { errorResponse, jsonResponse } from "@response"; import { errorResponse, jsonResponse } from "@response";
import { sanitizeHtml } from "@sanitization"; import { sanitizeHtml } from "@sanitization";
import ISO6391 from "iso-639-1"; import ISO6391 from "iso-639-1";
import { sanitize } from "isomorphic-dompurify";
import { MediaBackendType } from "media-manager"; import { MediaBackendType } from "media-manager";
import type { MediaBackend } from "media-manager"; import type { MediaBackend } from "media-manager";
import { client } from "~database/datasource"; import { client } from "~database/datasource";
@ -60,11 +59,11 @@ export default apiRoute<{
const sanitizedNote = await sanitizeHtml(note ?? ""); const sanitizedNote = await sanitizeHtml(note ?? "");
const sanitizedDisplayName = sanitize(display_name ?? "", { const sanitizedDisplayName = display_name ?? ""; /* sanitize(display_name ?? "", {
ALLOWED_TAGS: [], ALLOWED_TAGS: [],
ALLOWED_ATTR: [], ALLOWED_ATTR: [],
}); });
*/
/* if (!user.source) { /* if (!user.source) {
user.source = { user.source = {
privacy: "public", privacy: "public",

8
utils/sanitization.ts
View file

@ -1,8 +1,10 @@
import { config } from "config-manager"; import { config } from "config-manager";
import { sanitize } from "isomorphic-dompurify"; // import { sanitize } from "isomorphic-dompurify";
export const sanitizeHtml = async (html: string) => { export const sanitizeHtml = async (html: string) => {
const sanitizedHtml = sanitize(html, { // TEMP: Allow all tags and attributes
return html;
/* const sanitizedHtml = sanitize(html, {
ALLOWED_TAGS: [ ALLOWED_TAGS: [
"a", "a",
"p", "p",
@ -70,5 +72,5 @@ export const sanitizeHtml = async (html: string) => {
}, },
}) })
.transform(new Response(sanitizedHtml)) .transform(new Response(sanitizedHtml))
.text(); .text(); */
}; };