Also disallow entities inside of <code>

I think this is generally expected behaviour, and people are annoyed
when their code gets turned into links/hashtags/mentions.
This commit is contained in:
kibigo!
2022-11-10 19:14:52 -08:00
parent 09cbd6c65e
commit ae06820428

View File

@@ -69,7 +69,7 @@ class AdvancedTextFormatter < TextFormatter
Sanitize.node!(@tree, Sanitize::Config::MASTODON_OUTGOING)
document = @tree.document
@tree.xpath('.//text()[not(ancestor::a)]').each do |text_node|
@tree.xpath('.//text()[not(ancestor::a | ancestor::code)]').each do |text_node|
# Iterate over text elements and build up their replacements.
content = text_node.content
replacement = Nokogiri::XML::NodeSet.new(document)