formatter: don't add XSS emoji

2018-09-02 00:04:09 +00:00 · 2018-09-02 00:04:09 +00:00 · 834515fb51
commit 834515fb51
parent 3c7280934e
4 changed files with 19 additions and 3 deletions
--- a/lib/pleroma/formatter.ex
+++ b/lib/pleroma/formatter.ex
@ -154,6 +154,7 @@ defmodule Pleroma.Formatter do
          MediaProxy.url(file)
        }' />"
      )
+      |> HtmlSanitizeEx.basic_html()
    end)
  end