search

dakboard / Cloud-Platform

Feature requests, enhancements and anything you'd like to see in DAKboard!
https://dakboard.com
168 stars 39 forks source link

Strip HTML Tags from Google Calendar #1813

Closed rsalsbery closed 1 year ago

rsalsbery commented 1 year ago

Post the Security Updates to prevent XSS attacks, the side effect of seeing HTML tags for entries coming over from Google Calendar has become an issue. For the most part, you can remove these tags by clicking the Crossed our T icon in the description section as seen below:

image

But this does not apply to URLs. You can remove the Link for the URL using the Insert Link Button and clicking Cancel on the pop-up as seen below:

image

However, if you click the Description block or the Event Editor it automatically reapplies the link and the HTML Tags. This case is to determine if there is a way we can strip these tags from the input coming into our systems from Google.

Dan-Peck commented 1 year ago

Merged in @ e9ec518 and added to the queue for upcoming release to the live site.