Sefaria / Sefaria-Project

New Interfaces for Jewish Texts
https://www.sefaria.org
647 stars 265 forks source link

fix(topics): overwrite RefTopicLink._sanitize. #1931

Closed nsantacruz closed 1 month ago

nsantacruz commented 1 month ago

Default inherited from abstract.py mangles Refs with ampersands in them. The new implementation avoids that and instead sanitizes title and prompt which can actually be vectors for attack.