Escape blacklisted html tags

This commit is contained in:
Nicolas Werner 2020-01-14 17:47:30 +01:00
parent 62f17dffbd
commit 3f02b0bf56
3 changed files with 49 additions and 15 deletions

View file

@ -260,8 +260,8 @@ TimelineModel::data(const QString &id, int role) const
const static QRegularExpression replyFallback(
"<mx-reply>.*</mx-reply>", QRegularExpression::DotMatchesEverythingOption);
return QVariant(
utils::replaceEmoji(utils::linkifyMessage(formattedBodyWithFallback(event)))
.remove(replyFallback));
utils::replaceEmoji(utils::linkifyMessage(utils::escapeBlacklistedHtml(
formattedBodyWithFallback(event).remove(replyFallback)))));
}
case Url:
return QVariant(QString::fromStdString(url(event)));