diff --git a/files/helpers/sanitize.py b/files/helpers/sanitize.py index 499e3c335..e990a9789 100644 --- a/files/helpers/sanitize.py +++ b/files/helpers/sanitize.py @@ -100,6 +100,8 @@ allowed_styles = ['color', 'background-color', 'font-weight', 'transform', '-web def sanitize(sanitized, noimages=False, alert=False, comment=False, edit=False): + if sanitized.count(':') > 100: abort(418) + sanitized = markdown(sanitized) sanitized = sanitized.replace("\ufeff", "").replace("𒐪","").replace(" - + {{badge.name}} {{badge.description}} diff --git a/files/templates/admin/badge_remove.html b/files/templates/admin/badge_remove.html index 12bd571e0..7f3877355 100644 --- a/files/templates/admin/badge_remove.html +++ b/files/templates/admin/badge_remove.html @@ -60,7 +60,7 @@ - + {{badge.name}} {{badge.description}} diff --git a/files/templates/badges.html b/files/templates/badges.html index 35c57ad25..67be3fed0 100644 --- a/files/templates/badges.html +++ b/files/templates/badges.html @@ -23,7 +23,7 @@ {{loop.index}} {{badge.name}} - {{badge.name}} + {{badge.name}} {{badge.description}} {% endfor %} diff --git a/files/templates/patrons.html b/files/templates/patrons.html index c955d8ff1..4894efaf3 100644 --- a/files/templates/patrons.html +++ b/files/templates/patrons.html @@ -14,7 +14,7 @@ {{loop.index}} @{{u.username}}'s profile picture{{u.username}} - 2{{u.patron}} + 2{{u.patron}} {% endfor %} diff --git a/files/templates/submit.html b/files/templates/submit.html index e2a5d9a6a..8cb35a0a2 100644 --- a/files/templates/submit.html +++ b/files/templates/submit.html @@ -258,7 +258,7 @@ - + {% include "emoji_modal.html" %} {% include "gif_modal.html" %}