fix: XSS filter channel names in case a bad one had been submitted

2020-11-05 15:11:59 -05:00 · 2020-11-05 15:11:59 -05:00 · 44b1d55ebb
parent dbc1d26966
commit 44b1d55ebb
1 changed files with 3 additions and 1 deletions
--- a/ui/app/AppLayouts/Chat/ContactsColumn/Channel.qml
+++ b/ui/app/AppLayouts/Chat/ContactsColumn/Channel.qml
@ -64,7 +64,9 @@ Rectangle {

    StyledText {
        id: contactInfo
-        text: wrapper.chatType !== Constants.chatTypePublic ? Emoji.parse(Utils.removeStatusEns(wrapper.name), "26x26") : "#" + wrapper.name
+        text: wrapper.chatType !== Constants.chatTypePublic ?
+                  Emoji.parse(Utils.removeStatusEns(Utils.filterXSS(wrapper.name)), "26x26") :
+                  "#" + Utils.filterXSS(wrapper.name)
        anchors.right: contactTime.left
        anchors.rightMargin: Style.current.smallPadding
        elide: Text.ElideRight