LogalDeveloper/owncast
0
Fork 0
Code Activity

Prevent remote image injection with /img/emoji/ in url (#1245)

Browse Source 
* test remote img blocking with /img/emoji/ in url

* fix emoji filter

prevent injection of remote img with /img/emoji in url
This commit is contained in:
Meisam
2021-07-23 20:00:04 +02:00
committed by GitHub
parent ae78283caf
commit a8e93de134
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
core/chat/messageRendering_test.go
View File

@@ -33,7 +33,7 @@ blah blah blah
// Test to make sure we block remote images in chat messages.
func TestBlockRemoteImages(t *testing.T) {
messageContent := `<img src="https://via.placeholder.com/350x150"> test ![](https://via.placeholder.com/350x150)`
messageContent := `<img src="https://via.placeholder.com/img/emoji/350x150"> test ![](https://via.placeholder.com/img/emoji/350x150)`
expected := `<p> test </p>`
result := events.RenderAndSanitize(messageContent)