sanitize HTML on html returns - I had it in there for some time, I even tested it... likely gone during some commits

56265540dbeafc9afa0b6d8f5f26efa002d1b02f

Wolfsblvt <wolfsblvt@gmail.com>

Parents: d96bb3dcea9b5439d608ef444135b798f7d9996e
1 files changed, +1 -1Showing whitespace changes
public/scripts/slash-commands/SlashCommandReturnHelper.js+1 -1
@@ -56,7 +56,7 @@ export const slashCommandReturnHelper = {
5656 case 'chat-html':
5757 case 'toast-text':
5858 case 'toast-html': {
5959 const htmlOrNotHtml = shouldHtml ? DOMPurify.sanitize((new showdown.Converter()).makeHtml(stringValue)) : escapeHtml(stringValue);
6060
6161 if (type.startsWith('popup')) await callGenericPopup(htmlOrNotHtml, POPUP_TYPE.TEXT);
6262 if (type.startsWith('chat')) sendSystemMessage(system_message_types.GENERIC, htmlOrNotHtml);