Escape HTML tags in quoted text of non-native replies

2018-03-04 23:17:12 +02:00
parent e8c0312839
commit a8322992cc
1 changed files with 1 additions and 1 deletions
@@ -93,7 +93,7 @@ async def _add_reply_header(source, text, html, evt, relates_to,
        content = event["content"]
        body = (content["formatted_body"]
                if "formatted_body" in content
-                else content["body"])
+                else escape(content["body"]))
        sender = event['sender']
        puppet = pu.Puppet.get_by_mxid(sender, create=False)
        reply_displayname = puppet.displayname if puppet else sender