Fix doubly sanitized strings (#727)

* Add migration to de-sanitize database strings

* Remove SanitizationHelper functions related to XML sanitization

* Remove sanitization usage from website

* Implement suggested changes
This commit is contained in:
Josh 2023-03-30 18:03:08 -05:00 committed by GitHub
parent f5c8f53437
commit 50d1d9c7e5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
12 changed files with 26 additions and 66 deletions

View file

@ -44,8 +44,6 @@ public class UserPageController : ControllerBase
return this.Redirect("~/user/" + id);
}
// Prevent potential xml injection and censor content
msg = SanitizationHelper.SanitizeString(msg);
msg = CensorHelper.FilterMessage(msg);
bool success = await this.database.PostComment(token.UserId, id, CommentType.Profile, msg);