Fix crash in admin interface when viewing a remote user with verified links (#25796)

2023-07-07 18:10:17 +02:00 · 2023-07-07 18:10:17 +02:00 · dca0d8427e
parent b10c974ba1
commit dca0d8427e
1 changed files with 1 additions and 1 deletions
--- a/app/lib/text_formatter.rb
+++ b/app/lib/text_formatter.rb
@ -60,7 +60,7 @@ class TextFormatter
      suffix      = url[prefix.length + 30..-1]
      cutoff      = url[prefix.length..-1].length > 30

-      <<~HTML.squish
+      <<~HTML.squish.html_safe # rubocop:disable Rails/OutputSafety
        <a href="#{h(url)}" target="_blank" rel="#{rel.join(' ')}"><span class="invisible">#{h(prefix)}</span><span class="#{cutoff ? 'ellipsis' : ''}">#{h(display_url)}</span><span class="invisible">#{h(suffix)}</span></a>
      HTML
    rescue Addressable::URI::InvalidURIError, IDN::Idna::IdnaError