Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-02-04 13:49:56 +01:00
Code Issues Packages Projects Releases Wiki Activity

strip + validate before hook instead

Browse Source
This commit is contained in:
psychobunny
2017-10-26 18:27:54 -04:00
parent 98eddc78cb
commit 2453ce3cb3
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/messaging.js
View File

@@ -73,13 +73,14 @@ function canGet(hook, callerUid, uid, callback) {
}
Messaging.parse = function (message, fromuid, uid, roomId, isNew, callback) {
message = S(message).stripTags().decodeHTMLEntities().s;
message = validator.escape(String(message));
plugins.fireHook('filter:parse.raw', message, function (err, parsed) {
if (err) {
return callback(err);
}
parsed = S(parsed).stripTags().decodeHTMLEntities().s;
parsed = validator.escape(String(parsed));
var messageData = {
message: message,