This repository has been archived on 2024-01-04. You can view files and clone it, but cannot push or open issues or pull requests.
forgejo/modules/convert
zeripath af96286f22
Stop sanitizing full name in API (#17396)
The API convert.toUser function makes the incorrect assumption that full names could
be rendered as is without being escaped. It therefore runs the names through
markup.Sanitize which leads to a double escape of user full names. This
pr stops this.

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2021-10-22 15:17:35 +08:00
..
convert.go
git_commit.go
git_commit_test.go
issue.go
issue_comment.go
issue_test.go
main_test.go
notification.go API: add html urls to notification subjects (#17178) 2021-09-30 07:17:39 +03:00
pull.go API pull's head/base have correct permission (#17214) 2021-10-07 02:03:37 +02:00
pull_review.go
pull_test.go API pull's head/base have correct permission (#17214) 2021-10-07 02:03:37 +02:00
release.go
repository.go
status.go
user.go Stop sanitizing full name in API (#17396) 2021-10-22 15:17:35 +08:00
user_test.go
utils.go
utils_test.go