mirror of
1
Fork 0
forgejo/modules/convert
zeripath af96286f22
Stop sanitizing full name in API (#17396)
The API convert.toUser function makes the incorrect assumption that full names could
be rendered as is without being escaped. It therefore runs the names through
markup.Sanitize which leads to a double escape of user full names. This
pr stops this.

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2021-10-22 15:17:35 +08:00
..
convert.go Move login related structs and functions to models/login (#17093) 2021-09-24 19:32:56 +08:00
git_commit.go Fix API to return author for author on commits(#16276) 2021-06-27 23:15:42 +01:00
git_commit_test.go Move db related basic functions to models/db (#17075) 2021-09-19 19:49:59 +08:00
issue.go Calculate label URL on API (#16186) 2021-09-10 18:03:16 +02:00
issue_comment.go [refactor] Unify the export of user data via API (#15144) 2021-03-27 17:45:26 +01:00
issue_test.go Move db related basic functions to models/db (#17075) 2021-09-19 19:49:59 +08:00
main_test.go Move db related basic functions to models/db (#17075) 2021-09-19 19:49:59 +08:00
notification.go API: add html urls to notification subjects (#17178) 2021-09-30 07:17:39 +03:00
pull.go API pull's head/base have correct permission (#17214) 2021-10-07 02:03:37 +02:00
pull_review.go Expose resolver via API (#15167) 2021-03-28 00:37:51 +01:00
pull_test.go API pull's head/base have correct permission (#17214) 2021-10-07 02:03:37 +02:00
release.go [refactor] Unify the export of user data via API (#15144) 2021-03-27 17:45:26 +01:00
repository.go Fix some API bugs (#16184) 2021-06-18 01:24:55 +02:00
status.go [refactor] Unify the export of user data via API (#15144) 2021-03-27 17:45:26 +01:00
user.go Stop sanitizing full name in API (#17396) 2021-10-22 15:17:35 +08:00
user_test.go Move db related basic functions to models/db (#17075) 2021-09-19 19:49:59 +08:00
utils.go Add migrate from OneDev (#16356) 2021-08-22 00:47:45 +02:00
utils_test.go Add some Unit-Tests (#14500) 2021-01-28 19:08:11 +01:00