wassname/talk
1
0
Fork 0
mirror of https://github.com/wassname/talk.git synced 2026-07-01 21:15:47 +08:00
Code Issues Packages Projects Releases Wiki Activity

Initializing purifier config

Browse Source
This commit is contained in:
okbel
2018-02-23 13:16:00 -03:00
parent 907ffea1f9
commit 7422575aba
2 changed files with 15 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/talk-plugin-rich-text/server/DOMpurify.js
+12
View File
@@ -0,0 +1,12 @@
const createDOMPurify = require('dompurify');
const { JSDOM } = require('jsdom');
const config = require('./config');
// Initializing JSDOM and DOMPurify
const window = new JSDOM('', config.jsdom).window;
const DOMPurify = createDOMPurify(window);
// Setting our secure config
DOMPurify.setConfig(config.dompurify);
module.exports = DOMPurify;
plugins/talk-plugin-rich-text/server/hooks.js
+3 -9
View File
@@ -1,11 +1,5 @@
const createDOMPurify = require('dompurify');
const { JSDOM } = require('jsdom');
const { merge, get } = require('lodash');
const config = require('./config');
// Initializing JSDOM and DOMPurify
const window = new JSDOM('', config.jsdom).window;
const DOMPurify = createDOMPurify(window);
const DOMPurify = require('./DOMPurify');
module.exports = {
RootMutation: {
@@ -14,7 +8,7 @@ module.exports = {
// Let's sanitize the body
const dirtyInput = input.htmlBody;
const cleanInput = DOMPurify.sanitize(dirtyInput, config.dompurify);
const cleanInput = DOMPurify.sanitize(dirtyInput);
// Adding the clean body to the comment.metadata field
input.metadata = merge(get(input, 'metadata'), {
@@ -27,7 +21,7 @@ module.exports = {
// Let's sanitize the body
const dirtyInput = edit.htmlBody;
const cleanInput = DOMPurify.sanitize(dirtyInput, config.dompurify);
const cleanInput = DOMPurify.sanitize(dirtyInput);
// Adding the clean body to the comment.metadata field
edit.metadata = merge(get(edit, 'metadata'), {