From: eal <eal@waifu.club>
Date: Thu, 9 Aug 2018 10:07:03 +0000 (+0300)
Subject: HTML-sanitize usernames before emojifying.
X-Git-Url: https://git.squeep.com/?a=commitdiff_plain;h=37b802682ce1231f99976538a11c1584d48f47f4;p=akkoma

HTML-sanitize usernames before emojifying.
---

diff --git a/lib/pleroma/web/twitter_api/views/user_view.ex b/lib/pleroma/web/twitter_api/views/user_view.ex
index 30aaaf1ce..7d0f0e703 100644
--- a/lib/pleroma/web/twitter_api/views/user_view.ex
+++ b/lib/pleroma/web/twitter_api/views/user_view.ex
@@ -50,7 +50,7 @@ defmodule Pleroma.Web.TwitterAPI.UserView do
       "friends_count" => user_info[:following_count],
       "id" => user.id,
       "name" => user.name,
-      "name_html" => Formatter.emojify(user.name, emoji),
+      "name_html" => HtmlSanitizeEx.strip_tags(user.name) |> Formatter.emojify(emoji),
       "profile_image_url" => image,
       "profile_image_url_https" => image,
       "profile_image_url_profile_size" => image,