github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-12-16 16:33:44 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: sanitize topic title when staff is viewing a user's past flagged posts and deleted topics

Browse Source
This commit is contained in:
Neil Lalonde 2018-03-02 11:58:03 -05:00
parent e7f83358aa
commit e23b8e7905
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
app/assets/javascripts/discourse/routes/build-admin-user-posts-route.js.es6
View File

@ -1,3 +1,5 @@
import { emojiUnescape } from 'discourse/lib/text';
export default function (filter) { export default function (filter) {
return Discourse.Route.extend({ return Discourse.Route.extend({
actions: { actions: {
@ -20,6 +22,12 @@ export default function (filter) {
// initialize "canLoadMore" // initialize "canLoadMore"
model.set("canLoadMore", model.get("itemsLoaded") === 60); model.set("canLoadMore", model.get("itemsLoaded") === 60);
model.get('content').forEach((item) => {
if (item.get('title')) {
item.set('title', emojiUnescape(Handlebars.Utils.escapeExpression(item.title)));
}
});
this.controllerFor("user-posts").set("model", model); this.controllerFor("user-posts").set("model", model);
}, },