Mastodon API: Sanitize display names

Closes #1000
This commit is contained in:
rinpatch 2019-06-18 14:09:15 +03:00
commit c7acca2abb
3 changed files with 11 additions and 1 deletions

View file

@ -269,4 +269,10 @@ defmodule Pleroma.Web.MastodonAPI.AccountViewTest do
result = AccountView.render("account.json", %{user: user, for: user})
assert result.pleroma[:settings_store] == nil
end
test "sanitizes display names" do
user = insert(:user, name: "<marquee> username </marquee>")
result = AccountView.render("account.json", %{user: user})
refute result.display_name == "<marquee> username </marquee>"
end
end