LogalDeveloper/owncast
0
Fork 0
Code Activity

Sanitize actor displaynames (#4864)

Browse Source 
* Sanitize AP name possible XSS

* Pull out sanitizing method + remove rendering markdown for AP chat messages

* Add tests around AP message rendering and usernames

* Add sanitization tests to AP integration test
This commit is contained in:
Gabe Kangas
2026-03-31 20:33:05 -07:00
committed by GitHub
parent a2981903c2
commit e738156fd7
7 changed files with 783 additions and 109 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/chat/chat.go
-1
View File
@@ -126,7 +126,6 @@ func SendFediverseAction(eventType string, userAccountName string, image *string
}
message.SetDefaults()
message.RenderBody()
if err := Broadcast(&message); err != nil {
log.Errorln("error sending system message", err)