From 27a9f5dd027b7dbe9f4204edfe223f7bdebc61ac Mon Sep 17 00:00:00 2001 From: RMidhunSuresh Date: Thu, 6 Jan 2022 17:24:58 +0530 Subject: [PATCH] Use DOMPurify to remove mx-reply --- src/domain/session/room/timeline/deserialize.js | 1 - src/platform/web/parsehtml.js | 3 ++- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/domain/session/room/timeline/deserialize.js b/src/domain/session/room/timeline/deserialize.js index fd1e3449..6003aef9 100644 --- a/src/domain/session/room/timeline/deserialize.js +++ b/src/domain/session/room/timeline/deserialize.js @@ -345,7 +345,6 @@ class Deserializer { } export function parseHTMLBody(platform, mediaRepository, html) { - html = html.replace(/.+<\/mx-reply>/s, ""); const parseResult = platform.parseHTML(html); const deserializer = new Deserializer(parseResult, mediaRepository); const parts = deserializer.parseAnyNodes(parseResult.rootNodes); diff --git a/src/platform/web/parsehtml.js b/src/platform/web/parsehtml.js index ec30b2c9..21c8f39a 100644 --- a/src/platform/web/parsehtml.js +++ b/src/platform/web/parsehtml.js @@ -56,7 +56,8 @@ class HTMLParseResult { const sanitizeConfig = { ALLOWED_URI_REGEXP: /^(?:(?:(?:f|ht)tps?|mailto|tel|callto|cid|xmpp|xxx|mxc):|[^a-z]|[a-z+.-]+(?:[^a-z+.-:]|$))/i, - ADD_TAGS: ['mx-reply'] + FORBID_TAGS: ['mx-reply'], + KEEP_CONTENT: false, } export function parseHTML(html) {