trust oembedHTML to be cleaned server side
This commit is contained in:
parent
c10d20a138
commit
5510b7d622
|
@ -1175,6 +1175,7 @@ function iterateRecursiveReplaceHtmlSpecialChars(obj) {
|
||||||
}
|
}
|
||||||
else if(typeof obj[property] == 'string'
|
else if(typeof obj[property] == 'string'
|
||||||
&& property != 'statusnet_html'
|
&& property != 'statusnet_html'
|
||||||
|
&& property != 'oembedHTML' // we trust this to be cleaned server side
|
||||||
&& property != 'source') {
|
&& property != 'source') {
|
||||||
obj[property] = replaceHtmlSpecialChars(obj[property]);
|
obj[property] = replaceHtmlSpecialChars(obj[property]);
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue
Block a user