do not escape req.body.tag (#559)

Co-authored-by: Markus Frindt <m.frindt@cognigy.com>
This commit is contained in:
Markus Frindt
2023-12-05 10:06:04 -05:00
committed by GitHub
co-authored by Markus Frindt
parent 4273196447
commit 46755f909c
+1 -4
View File
@@ -116,12 +116,9 @@ const customSanitizeFunction = (value) => {
/* trims characters at the beginning and at the end of a string */
value = value.trim();
/* We don't escape URLs but verify them via new URL */
/* Verify strings including 'http' via new URL */
if (value.includes('http')) {
value = new URL(value).toString();
} else {
/* replaces <, >, &, ', " and / with their corresponding HTML entities */
value = escape(value);
}
}
} catch (error) {