diff --git a/note.html b/note.html index 6a62bbf..82ce1ff 100644 --- a/note.html +++ b/note.html @@ -4,47 +4,47 @@ {{if eq .type "profile"}} Nostr Public Key {{.npub}} - - + + {{ if .metadata.Picture }} - - + + {{end}} {{ if .metadata.About }} - + {{end}} {{end}} {{ if eq .type "event" }} Nostr Event {{.nevent}} - - - + + + {{ if .textImageURL }} - - + + {{ else }} {{ if .image }} - - + + {{end}} {{ if .video }} - - - + + + {{end}} {{end}} - - + + {{end}} {{ if eq .type "address" }} - Nostr Address {{.naddr}} + Nostr Address {{.naddr | SanitizeString}} {{end}} @@ -65,23 +65,23 @@
- +
- {{.metadata.Name}} {{.metadata.DisplayName}} + {{.metadata.Name | SanitizeString}} {{.metadata.DisplayName | SanitizeString}}
-
{{.npubShort}}
+
{{.npubShort | SanitizeString}}
- {{.createdAt}} + {{.createdAt | SanitizeString}}
- {{.description | BasicFormatting }} + {{.description | SanitizeString | BasicFormatting }}
@@ -93,12 +93,12 @@
Nevent
-
{{.nevent}}
+
{{.nevent | SanitizeString}}
Last update:
- {{.createdAt}} + {{.createdAt | SanitizeString}}
@@ -109,7 +109,7 @@
Event JSON
-
{{.eventJSON}}
+
{{.eventJSON | SanitizeString}}
diff --git a/profile.html b/profile.html index 953bcb0..e254b8d 100644 --- a/profile.html +++ b/profile.html @@ -4,47 +4,47 @@ {{if eq .type "profile"}} Nostr Public Key {{.npub}} - - + + {{ if .metadata.Picture }} - - + + {{end}} {{ if .metadata.About }} - + {{end}} {{end}} {{ if eq .type "event" }} Nostr Event {{.nevent}} - - - + + + {{ if .textImageURL }} - - + + {{ else }} {{ if .image }} - - + + {{end}} {{ if .video }} - - - + + + {{end}} {{end}} - - + + {{end}} {{ if eq .type "address" }} - Nostr Address {{.naddr}} + Nostr Address {{.naddr | SanitizeString }} {{end}} @@ -63,52 +63,52 @@
- {{.metadata.Name}} {{.metadata.DisplayName}} + {{.metadata.Name | SanitizeString}} {{.metadata.DisplayName | SanitizeString}}
- +
Last update:
- {{.createdAt}} + {{.createdAt | SanitizeString}}
- {{.metadata.Name}} {{.metadata.DisplayName}} + {{.metadata.Name | SanitizeString}} {{.metadata.DisplayName | SanitizeString}}
- {{.metadata.Website}} + {{.metadata.Website | SanitizeString}}
- {{.metadata.About}} + {{.metadata.About | SanitizeString}}
Public key
- {{.npub}} + {{.npub | SanitizeString}}
NIP-05
- {{.metadata.NIP05}} + {{.metadata.NIP05 | SanitizeString}}
LN Address
- {{.metadata.LUD16}} + {{.metadata.LUD16 | SanitizeString}}
Metadata Event
-
{{.nevent}}
+
{{.nevent | SanitizeString}}
Last update:
- {{.createdAt}} + {{.createdAt | SanitizeString}}
diff --git a/render.go b/render.go index a0758c7..fffb512 100644 --- a/render.go +++ b/render.go @@ -4,6 +4,7 @@ import ( _ "embed" "encoding/json" "fmt" + "html" "net/http" "regexp" "strings" @@ -161,9 +162,6 @@ func render(w http.ResponseWriter, r *http.Request) { eventJSON, _ := json.MarshalIndent(event, "", " ") - // TODO: Sanitize content - description += "\n" - params := map[string]any{ "createdAt": createdAt, "clients": generateClientList(code, event), @@ -192,6 +190,7 @@ func render(w http.ResponseWriter, r *http.Request) { var funcMap = template.FuncMap{ "BasicFormatting": BasicFormatting, + "SanitizeString": html.EscapeString, } var tmpl = template.Must(template.New("event").Funcs(funcMap).Parse(templates[typ]))