vbatts
/
mastodon
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use rich OEmbed content when it conforms to Mastodon's sanitization

This commit is contained in:
Effy Elden 2022-12-20 15:19:35 +11:00 committed by GitHub
parent c1de673060
commit 81e23191cf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
app/services/fetch_link_card_service.rb
View File

@ -136,8 +136,13 @@ class FetchLinkCardService < BaseService
@card.html = Sanitize.fragment(embed[:html], Sanitize::Config::MASTODON_OEMBED)
@card.image_remote_url = (url + embed[:thumbnail_url]).to_s if embed[:thumbnail_url].present?
when 'rich'
# Most providers rely on <script> tags, which is a no-no
return false
sanitized_rich_html = Sanitize.fragment(embed[:html], Sanitize::Config::MASTODON_OEMBED)
return false if sanitized_rich_html != embed[:html]
@card.width = embed[:width].presence || 0
@card.height = embed[:height].presence || 0
@card.html = sanitized_rich_html
@card.image_remote_url = (url + embed[:thumbnail_url]).to_s if embed[:thumbnail_url].present?
end
@card.save_with_optional_image!