]> source.dussan.org Git - gitea.git/commit
Stop sanitizing full name in API (#17396)
authorzeripath <art27@cantab.net>
Fri, 22 Oct 2021 07:17:35 +0000 (08:17 +0100)
committerGitHub <noreply@github.com>
Fri, 22 Oct 2021 07:17:35 +0000 (15:17 +0800)
commitaf96286f2254c1e073394aae0f18b132f07b38ad
treebab12c7bc5537ea614e2fca5dee98f28e95fd18a
parent23d36929bc098e452ccdd6e9188302304dde980e
Stop sanitizing full name in API (#17396)

The API convert.toUser function makes the incorrect assumption that full names could
be rendered as is without being escaped. It therefore runs the names through
markup.Sanitize which leads to a double escape of user full names. This
pr stops this.

Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
modules/convert/user.go