pleroma

commit: cbc5b8cebd9255e0c49e8fb02daed4680be1d336
parent e8d35256653d196fd7c0daba8673a74dfe40a8e8
Author: Lain Soykaf <lain@lain.com>
Date:   Fri,  2 Jun 2023 17:03:21 +0400

B Preload: Make sure that the preloaded json is html safe

Diffstat:
M
lib/pleroma/web/preload.ex
4
++--

1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lib/pleroma/web/preload.ex b/lib/pleroma/web/preload.ex
@@ -11,7 +11,7 @@ defmodule Pleroma.Web.Preload do
         terms =
           params
           |> parser.generate_terms()
-          |> Enum.map(fn {k, v} -> {k, Base.encode64(Jason.encode!(v))} end)
+          |> Enum.map(fn {k, v} -> {k, Base.encode64(Jason.encode!(v, escape: :html_safe))} end)
           |> Enum.into(%{})
 
         Map.merge(acc, terms)
@@ -19,7 +19,7 @@ defmodule Pleroma.Web.Preload do
 
     rendered_html =
       preload_data
-      |> Jason.encode!()
+      |> Jason.encode!(escape: :html_safe)
       |> build_script_tag()
       |> HTML.safe_to_string()