plausible/analytics
1
1
Fork 0
mirror of https://github.com/plausible/analytics.git synced 2024-12-24 10:02:10 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix not so safe input (#4263)

Browse Source
This commit is contained in:
Cenk Kücük 2024-06-24 02:10:41 +02:00 committed by GitHub
parent a8b9505208
commit c59bdd27e4
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
lib/plausible/site/admin.ex
View File

@ -164,11 +164,14 @@ defmodule Plausible.SiteAdmin do
owner = site.owner
if owner do
escaped_name = Phoenix.HTML.html_escape(owner.name) |> Phoenix.HTML.safe_to_string()
escaped_email = Phoenix.HTML.html_escape(owner.email) |> Phoenix.HTML.safe_to_string()
{:safe,
"""
<a href="/crm/auth/user/#{owner.id}">#{owner.name}</a>
<a href="/crm/auth/user/#{owner.id}">#{escaped_name}</a>
<br/><br/>
#{owner.email}
#{escaped_email}
"""}
end
end