sanitize HTML on html returns - I had it in there for some time, I even tested it... likely gone during some commits

56265540dbeafc9afa0b6d8f5f26efa002d1b02f

Wolfsblvt <wolfsblvt@gmail.com>

Parents: d96bb3dcea9b5439d608ef444135b798f7d9996e
1 files changed, +1 -1Showing whitespace changes
public/scripts/slash-commands/SlashCommandReturnHelper.js+1 -1
@@ -56,7 +56,7 @@ export const slashCommandReturnHelper = {
56 case 'chat-html':56 case 'chat-html':
57 case 'toast-text':57 case 'toast-text':
58 case 'toast-html': {58 case 'toast-html': {
59 const htmlOrNotHtml = shouldHtml ? (new showdown.Converter()).makeHtml(stringValue) : escapeHtml(stringValue);59 const htmlOrNotHtml = shouldHtml ? DOMPurify.sanitize((new showdown.Converter()).makeHtml(stringValue)) : escapeHtml(stringValue);
6060
61 if (type.startsWith('popup')) await callGenericPopup(htmlOrNotHtml, POPUP_TYPE.TEXT);61 if (type.startsWith('popup')) await callGenericPopup(htmlOrNotHtml, POPUP_TYPE.TEXT);
62 if (type.startsWith('chat')) sendSystemMessage(system_message_types.GENERIC, htmlOrNotHtml);62 if (type.startsWith('chat')) sendSystemMessage(system_message_types.GENERIC, htmlOrNotHtml);