plausible/analytics
1
1
Fork 0
mirror of https://github.com/plausible/analytics.git synced 2024-12-25 02:24:55 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix not so safe input (#4263)

Browse Source
This commit is contained in:
Cenk Kücük 2024-06-24 02:10:41 +02:00 committed by GitHub
parent a8b9505208
commit c59bdd27e4
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
lib/plausible/site/admin.ex
View File

@ -164,11 +164,14 @@ defmodule Plausible.SiteAdmin do
owner = site.owner owner = site.owner
if owner do if owner do
escaped_name = Phoenix.HTML.html_escape(owner.name) |> Phoenix.HTML.safe_to_string()
escaped_email = Phoenix.HTML.html_escape(owner.email) |> Phoenix.HTML.safe_to_string()
{:safe, {:safe,
""" """
<a href="/crm/auth/user/#{owner.id}">#{owner.name}</a> <a href="/crm/auth/user/#{owner.id}">#{escaped_name}</a>
<br/><br/> <br/><br/>
#{owner.email} #{escaped_email}
"""} """}
end end
end end