skorotkiewicz/yosup
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

web: removed sanitize method, use html literal

Browse source
This commit is contained in:
Thomas Mathews 2022-12-20 10:30:16 -08:00
parent 21604bd859
commit 7f1ea5cfed
2 changed files with 5 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

9
web/js/ui/fmt.js
View file

@ -29,7 +29,7 @@ function format_content(ev, show_media) {
if (ev.kind === 7) { if (ev.kind === 7) {
if (ev.content === "" || ev.content === "+") if (ev.content === "" || ev.content === "+")
return "❤️" return "❤️"
return sanitize(ev.content.trim()); return html`${ev.content.trim()}`;
} }
const content = ev.content.trim(); const content = ev.content.trim();
const body = convert_quote_blocks(content, show_media) const body = convert_quote_blocks(content, show_media)
@ -61,21 +61,20 @@ function convert_quote_blocks(content, show_media)
str += "<span class='quote'>" str += "<span class='quote'>"
blockin = true blockin = true
} }
str += linkify(sanitize(line.slice(1)), show_media) str += linkify(line.slice(1), show_media)
} else { } else {
if (blockin) { if (blockin) {
blockin = false blockin = false
str += "</span>" str += "</span>"
} }
str += linkify(sanitize(line), show_media) str += linkify(line, show_media)
} }
return str + "<br/>" return str + "<br/>"
}, "") }, "")
} }
/* format_profile_name takes in a profile and tries it's best to return a string /* format_profile_name takes in a profile and tries it's best to return a string
* that is best suited for the profile. It also assigns the sanitized_name to * that is best suited for the profile.
* the profile.
*/ */
function fmt_profile_name(profile={}, fallback="Anonymous") { function fmt_profile_name(profile={}, fallback="Anonymous") {
const name = profile.display_name || profile.user || profile.name || const name = profile.display_name || profile.user || profile.name ||

8
web/js/util.js
View file

@ -188,12 +188,6 @@ function fmt_since_str(current, previous) {
} }
} }
function sanitize(str) {
if (!str)
return ""
return str.replaceAll("<","&lt;").replaceAll(">","&gt;")
}
function robohash(str) { function robohash(str) {
return "https://robohash.org/" + str return "https://robohash.org/" + str
} }
@ -235,7 +229,7 @@ function get_picture(pk, profile) {
return robohash(pk) return robohash(pk)
if (profile.resolved_picture) if (profile.resolved_picture)
return profile.resolved_picture return profile.resolved_picture
profile.resolved_picture = sanitize(profile.picture) || robohash(pk) profile.resolved_picture = html`${profile.picture}` || robohash(pk)
return profile.resolved_picture return profile.resolved_picture
} }