search

cohen990 / VoxPop

The voice of the people in pictures!
0 stars 0 forks source link

Html Snitizer #75

Closed AJizzleBizzle closed 9 years ago

AJizzleBizzle commented 9 years ago

Should;

Sanitizer.GetSafeHtmlFragment(model.Content)

in BlogPostEntity.cs, line: 159 also be applied to Title and Poll options? Or anywhere the user can input displayable text?

AJizzleBizzle commented 9 years ago

I think this might be blocking 's in user content

cohen990 commented 9 years ago

's should not be blocked. Can you show me an example?

For title and poll options, since they're standard inputs which don't have AllowHtml MVC should strip html automatically (or reject any posts with html in them, I'm not sure which).

Probably worth double checking though

AJizzleBizzle commented 9 years ago

's in newly created stories are still blue and contain the correct href's but you can't click on them...Try it on your end maybe its somethingI've done but only noticed last night