groove/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-07-03 16:01:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update podcast episode update endpoint to sanitize subtitle
Some checks failed
CodeQL / Analyze (push) Has been cancelled
Details
Run Component Tests / Run Component Tests (push) Has been cancelled
Details
Build and Push Docker Image / build (push) Has been cancelled
Details
Integration Test / build and test (push) Has been cancelled
Details
Run Unit Tests / Run Unit Tests (push) Has been cancelled
Details

Browse source
This commit is contained in:
advplyr 2026-03-18 17:01:19 -05:00
parent 7c0d9efe91
commit 4bdd76d94c
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
server/controllers/PodcastController.js
View file

@ -412,6 +412,12 @@ class PodcastController {
Logger.debug(`[PodcastController] Sanitized description from "${req.body[key]}" to "${sanitizedDescription}"`) Logger.debug(`[PodcastController] Sanitized description from "${req.body[key]}" to "${sanitizedDescription}"`)
req.body[key] = sanitizedDescription req.body[key] = sanitizedDescription
} }
} else if (key === 'subtitle' && req.body[key]) {
const sanitizedSubtitle = htmlSanitizer.sanitize(req.body[key])
if (sanitizedSubtitle !== req.body[key]) {
Logger.debug(`[PodcastController] Sanitized subtitle from "${req.body[key]}" to "${sanitizedSubtitle}"`)
req.body[key] = sanitizedSubtitle
}
} }
updatePayload[key] = req.body[key] updatePayload[key] = req.body[key]