Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Escaped note / reply content #235

Merged
merged 4 commits into from
Dec 18, 2024
Merged

Conversation

mike182uk
Copy link
Member

@mike182uk mike182uk commented Dec 18, 2024

refs AP-627

Escaped note / reply content before persisting to the database to prevent unintended HTML injection

This PR also:

  • moves sanitize helpers to html helpers as this feels like a more appropriate location
  • updates reply input validation to match note input validation for consistency
  • adds scenarios for creating a reply

@mike182uk mike182uk merged commit 08d551f into main Dec 18, 2024
2 checks passed
@mike182uk mike182uk deleted the mike-ap-627-sanitising-note-content branch December 18, 2024 13:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant