michael/pyfedi
1
0
Fork 0
mirror of https://codeberg.org/rimu/pyfedi synced 2025-01-23 19:36:56 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

handle unescaped html in post titles

Browse source
This commit is contained in:
rimu 2024-01-18 15:15:10 +13:00
parent 79dddeb6fa
commit 8aa3f0d9af
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
app/activitypub/util.py
View file

@ -1,5 +1,6 @@
from __future__ import annotations from __future__ import annotations
import html
import os import os
from datetime import timedelta from datetime import timedelta
from random import randint from random import randint
@ -432,7 +433,7 @@ def actor_json_to_model(activity_json, address, server):
def post_json_to_model(post_json, user, community) -> Post: def post_json_to_model(post_json, user, community) -> Post:
post = Post(user_id=user.id, community_id=community.id, post = Post(user_id=user.id, community_id=community.id,
title=post_json['name'].replace('&', '&'), title=html.unescape(post_json['name']),
comments_enabled=post_json['commentsEnabled'], comments_enabled=post_json['commentsEnabled'],
sticky=post_json['stickied'] if 'stickied' in post_json else False, sticky=post_json['stickied'] if 'stickied' in post_json else False,
nsfw=post_json['sensitive'], nsfw=post_json['sensitive'],
@ -987,7 +988,7 @@ def create_post_reply(activity_log: ActivityPubLog, community: Community, in_rep
def create_post(activity_log: ActivityPubLog, community: Community, request_json: dict, user: User, announce_id=None) -> Union[Post, None]: def create_post(activity_log: ActivityPubLog, community: Community, request_json: dict, user: User, announce_id=None) -> Union[Post, None]:
post = Post(user_id=user.id, community_id=community.id, post = Post(user_id=user.id, community_id=community.id,
title=request_json['object']['name'].replace('&', '&'), title=html.unescape(request_json['object']['name']),
comments_enabled=request_json['object']['commentsEnabled'], comments_enabled=request_json['object']['commentsEnabled'],
sticky=request_json['object']['stickied'] if 'stickied' in request_json['object'] else False, sticky=request_json['object']['stickied'] if 'stickied' in request_json['object'] else False,
nsfw=request_json['object']['sensitive'], nsfw=request_json['object']['sensitive'],