From 37c1becdf506fd1effc2dbc6079192cb98eaaacd Mon Sep 17 00:00:00 2001
From: Vika <vika@fireburn.ru>
Date: Thu, 2 Jan 2025 14:12:08 +0300
Subject: Allow arbitrary HTML in Markdown post content
Oh, that's how it's done. Fuck.
Change-Id: I40c5296ba05ddec7aa277308520017e5068e6fc9
---
src/micropub/util.rs | 12 +++++++++++-
1 file changed, 11 insertions(+), 1 deletion(-)
diff --git a/src/micropub/util.rs b/src/micropub/util.rs
index 9bbdcf6..19f4953 100644
--- a/src/micropub/util.rs
+++ b/src/micropub/util.rs
@@ -94,7 +94,17 @@ pub fn normalize_mf2(mut body: serde_json::Value, user: &TokenData) -> (String,
if body["properties"]["content"][0].is_string() {
// Convert the content to HTML using the `markdown` crate
body["properties"]["content"] = json!([{
- "html": markdown::to_html(body["properties"]["content"][0].as_str().unwrap()),
+ "html": markdown::to_html_with_options(
+ body["properties"]["content"][0].as_str().unwrap(),
+ &markdown::Options {
+ compile: markdown::CompileOptions {
+ allow_dangerous_html: true,
+ allow_dangerous_protocol: false,
+ ..Default::default()
+ },
+ parse: markdown::ParseOptions::default()
+ }
+ ).unwrap(),
"value": body["properties"]["content"][0]
}])
}
--
cgit 1.4.1