indymedia
/
epicyon
mirror of https://gitlab.com/bashrc2/epicyon
7
4
Fork 1
Code Issues 14 Releases Wiki Activity

Escape semicolons anyway

merge-requests/30/head
Bob Mottram 2021-02-28 16:57:32 +00:00
parent 12d80d79d3
commit 5f0e3c3d83
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
outbox.py
View File

@ -77,6 +77,11 @@ def postMessageToOutbox(messageJson: {}, postToNickname: str,
if messageJson.get('object'):
if isinstance(messageJson['object'], dict):
if messageJson['object'].get('content'):
# semicolons cause trouble, so escape them
if ';' in messageJson['object']['content']:
messageJson['object']['content'] = \
messageJson['object']['content'].replace(';', '%3B')
if dangerousMarkup(messageJson['object']['content'],
allowLocalNetworkAccess):
print('POST to outbox contains dangerous markup: ' +