mastodon api: sanitize the bio HTML

2018-08-21 10:53:53 +01:00 · 2018-08-21 10:53:53 +01:00 · 175f0bebbc
parent c1b8a6a73b
commit 175f0bebbc
1 changed files with 1 additions and 1 deletions
--- a/lib/pleroma/web/mastodon_api/views/account_view.ex
+++ b/lib/pleroma/web/mastodon_api/views/account_view.ex
@ -36,7 +36,7 @@ def render("account.json", %{user: user}) do
      followers_count: user_info.follower_count,
      following_count: user_info.following_count,
      statuses_count: user_info.note_count,
-      note: user.bio || "",
+      note: HtmlSanitizeEx.basic_html(user.bio) || "",
      url: user.ap_id,
      avatar: image,
      avatar_static: image,