From 1884ffd95f85d5a510635a5e42b34de153f3c502 Mon Sep 17 00:00:00 2001
From: sudokoko <koko@sudokoko.xyz>
Date: Fri, 29 Mar 2024 16:54:03 -0400
Subject: [PATCH] Prevent possible XSS

---
 .../Pages/LandingPage.cshtml                  | 20 +++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/ProjectLighthouse.Servers.Website/Pages/LandingPage.cshtml b/ProjectLighthouse.Servers.Website/Pages/LandingPage.cshtml
index b27711ad..abce659a 100644
--- a/ProjectLighthouse.Servers.Website/Pages/LandingPage.cshtml
+++ b/ProjectLighthouse.Servers.Website/Pages/LandingPage.cshtml
@@ -66,15 +66,19 @@
         <div>
             <h3>@Model.LatestAnnouncement.Title</h3>
             <div style="padding-bottom: 2em;">
-                <span style="white-space: pre-line">
-                    @{
-                        string truncatedAnnouncement = Model.LatestAnnouncement.Content.Length > 250
-                            ? Model.LatestAnnouncement.Content[..250] +
-                              $"... <a href='{ServerConfiguration.Instance.ExternalUrl}/notifications'>read more</a>"
-                            : Model.LatestAnnouncement.Content;
+                    @if (Model.LatestAnnouncement.Content.Length > 250)
+                    {
+                        <span style="white-space: pre-line">
+                            @Model.LatestAnnouncement.Content[..250]
+                            <a href="@ServerConfiguration.Instance.ExternalUrl/notifications">read more</a>
+                        </span>
+                    }
+                    else
+                    {
+                        <span style="white-space: pre-line">
+                            @Model.LatestAnnouncement.Content
+                        </span>
                     }
-                    @Html.Raw(truncatedAnnouncement)
-                </span>
             </div>
             @if (Model.LatestAnnouncement.Publisher != null)
             {