d3v1l/matrixion
1
0
Fork 0
mirror of https://github.com/Nheko-Reborn/nheko.git synced 2024-11-25 20:48:52 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #722 from Thulinma/noHtmlFixes

Browse source 
Fix two more HTML injection attacks.
This commit is contained in:
DeepBlueV7.X 2021-09-11 22:19:44 +00:00 committed by GitHub
commit e88ab89c18
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/RoomsModel.cpp
View file

@ -77,7 +77,7 @@ RoomsModel::data(const QModelIndex &index, int role) const
return QString::fromStdString(
roomInfos.at(roomids[index.row()]).avatar_url);
case Roles::RoomID:
return roomids[index.row()];
return roomids[index.row()].toHtmlEscaped();
}
}
return {};

4
src/timeline/Reaction.h
View file

@ -16,8 +16,8 @@ struct Reaction
Q_PROPERTY(int count READ count)
public:
QString key() const { return key_; }
QString users() const { return users_; }
QString key() const { return key_.toHtmlEscaped(); }
QString users() const { return users_.toHtmlEscaped(); }
QString selfReactedEvent() const { return selfReactedEvent_; }
int count() const { return count_; }