summaryrefslogtreecommitdiff
path: root/packages/backend/src/core
diff options
context:
space:
mode:
authorJulia <julia@insertdomain.name>2025-04-27 20:06:59 +0000
committerJulia <julia@insertdomain.name>2025-04-27 20:06:59 +0000
commitae0ca28ae443128c8a4488d0c95d7af4a65ba1ea (patch)
treeb4ec179f9e75210b71b66bfea0780a2ef2e20136 /packages/backend/src/core
parentmerge: 2025.2.2 (!927) (diff)
parentFix linter issue (diff)
downloadsharkey-ae0ca28ae443128c8a4488d0c95d7af4a65ba1ea.tar.gz
sharkey-ae0ca28ae443128c8a4488d0c95d7af4a65ba1ea.tar.bz2
sharkey-ae0ca28ae443128c8a4488d0c95d7af4a65ba1ea.zip
merge: Security fixes (!970)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/970
Diffstat (limited to 'packages/backend/src/core')
-rw-r--r--packages/backend/src/core/activitypub/ApRendererService.ts4
1 files changed, 1 insertions, 3 deletions
diff --git a/packages/backend/src/core/activitypub/ApRendererService.ts b/packages/backend/src/core/activitypub/ApRendererService.ts
index cb9b74f6d7..44eb029a35 100644
--- a/packages/backend/src/core/activitypub/ApRendererService.ts
+++ b/packages/backend/src/core/activitypub/ApRendererService.ts
@@ -496,9 +496,7 @@ export class ApRendererService {
const attachment = profile.fields.map(field => ({
type: 'PropertyValue',
name: field.name,
- value: (field.value.startsWith('http://') || field.value.startsWith('https://'))
- ? `<a href="${new URL(field.value).href}" rel="me nofollow noopener" target="_blank">${new URL(field.value).href}</a>`
- : field.value,
+ value: this.mfmService.toHtml(mfm.parse(field.value)),
}));
const emojis = await this.getEmojis(user.emojis);