Fix issue #1

RedstoneWizard08 · Mar 11, 2023 · 9f7bd11 · 9f7bd11
1 parent 6990fbf
commit 9f7bd11
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 9 deletions.
diff --git a/app/src/routes/Instance.tsx b/app/src/routes/Instance.tsx
@@ -1,4 +1,4 @@
-import {Link, useRouter} from "preact-router";
+import { Link, useRouter } from "preact-router";
 import { useEffect, useState } from "preact/hooks";
 import { InstanceInfo, KSPGame } from "../api/instance";
 import { invoke_proxy } from "../invoke";
@@ -14,9 +14,7 @@ export const Instance = () => {
     const [instances, setInstances] = useState(false);
 
     useEffect(() => {
-        setInstances(
-            /\/instances?(\/\d+)?/i.test(router.path!)
-        );
+        setInstances(/\/instances?(\/\d+)?/i.test(router.path!));
     }, [router.path]);
 
     const [instanceInfo, setInstanceInfo] = useState<InstanceInfo | undefined>(
@@ -74,7 +72,11 @@ export const Instance = () => {
                     </div>
                 </Link>
                 <div className="instance">
-                    <img src={background} className="background" alt="background" />
+                    <img
+                        src={background}
+                        className="background"
+                        alt="background"
+                    />
 
                     <div className="infos">
                         <div className="left">
@@ -112,13 +114,20 @@ export const Instance = () => {
                         <textarea
                             className="editor"
                             defaultValue={instanceInfo?.description}
-                            ref={editor} />
+                            ref={editor}
+                        />
                     ) : (
                         <p
                             className="description"
                             dangerouslySetInnerHTML={{
-                                __html: marked(instanceInfo?.description || ""),
-                            }} />
+                                __html: marked(
+                                    instanceInfo?.description || "",
+                                    {
+                                        sanitize: true,
+                                    }
+                                ),
+                            }}
+                        />
                     )}
                 </div>
             </div>

diff --git a/app/src/routes/mods/FullMod.tsx b/app/src/routes/mods/FullMod.tsx
@@ -61,7 +61,9 @@ export const FullMod = () => {
                 <p
                     className="description"
                     dangerouslySetInnerHTML={{
-                        __html: marked(modInfo?.description || ""),
+                        __html: marked(modInfo?.description || "", {
+                            sanitize: true,
+                        }),
                     }}
                 />
             </div>