From e25ed43998d0134c38985f3f80a3e193b1ebf9ee Mon Sep 17 00:00:00 2001
From: kaotisk <kaotisk@arching-kaos.org>
Date: Fri, 1 Sep 2023 06:51:28 +0300
Subject: Sanitizing Markdown

---
 src/js/arching-kaos-tools.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/js')

diff --git a/src/js/arching-kaos-tools.js b/src/js/arching-kaos-tools.js
index 3d5b1d1..e704eb7 100644
--- a/src/js/arching-kaos-tools.js
+++ b/src/js/arching-kaos-tools.js
@@ -507,7 +507,7 @@ function getipfstext(ipfs,articleid){
                     lines.splice(0,1);
                     // join the array back into a single string
                     var newtext = lines.join('\n');
-                    pre.innerHTML = marked.parse(newtext);
+                    pre.innerHTML = DOMPurify.sanitize(marked.parse(newtext));
                     divs.appendChild(pre);
                 }
                 progressPlaceholder.max++;
-- 
cgit v1.2.3