trust oembedHTML to be cleaned server side

This commit is contained in:
Hannes Mannerheim 2016-01-21 10:05:45 +01:00
parent c10d20a138
commit 5510b7d622

View File

@ -1175,6 +1175,7 @@ function iterateRecursiveReplaceHtmlSpecialChars(obj) {
}
else if(typeof obj[property] == 'string'
&& property != 'statusnet_html'
&& property != 'oembedHTML' // we trust this to be cleaned server side
&& property != 'source') {
obj[property] = replaceHtmlSpecialChars(obj[property]);
}