From 5f0e3c3d837623a95b72bf8980dea6bdf00b42df Mon Sep 17 00:00:00 2001 From: Bob Mottram Date: Sun, 28 Feb 2021 16:57:32 +0000 Subject: [PATCH] Escape semicolons anyway --- outbox.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/outbox.py b/outbox.py index 11d595c6e..43c1210d6 100644 --- a/outbox.py +++ b/outbox.py @@ -77,6 +77,11 @@ def postMessageToOutbox(messageJson: {}, postToNickname: str, if messageJson.get('object'): if isinstance(messageJson['object'], dict): if messageJson['object'].get('content'): + # semicolons cause trouble, so escape them + if ';' in messageJson['object']['content']: + messageJson['object']['content'] = \ + messageJson['object']['content'].replace(';', '%3B') + if dangerousMarkup(messageJson['object']['content'], allowLocalNetworkAccess): print('POST to outbox contains dangerous markup: ' +