Use a specific xss sanitizer for long form content

2025-12-17 22:34:25 +01:00 · 2023-06-02 23:59:17 +02:00
parent ddaba769f9
commit 44f9c07ee5
9 changed files with 78 additions and 54 deletions
--- a/render.go
+++ b/render.go
@@ -252,7 +252,8 @@ func render(w http.ResponseWriter, r *http.Request) {
 	funcMap := template.FuncMap{
 		"basicFormatting": basicFormatting,
 		"mdToHTML":        mdToHTML,
-		"sanitizeString":  html.EscapeString,
+		"escapeString":    html.EscapeString,
+		"sanitizeXSS":     sanitizeXSS,
 	}

 	tmpl := template.Must(