You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
buuut..
That would mean we have to "trust" the feed, which is an external site to not have any HTML injection.
Possibly we could also selectively just escape the characters by using the removtags filter before unescaping... but in the end, here is the issue but not a PR since I did not see that in production.
The text was updated successfully, but these errors were encountered:
I could not find it in production, on dev there are unescaped special html charachters:

One fix would be easy:
Don't escape the description from the RSS feed:
https://github.com/liqd/a4-opin/blob/master/euth_wagtail/templates/includes/rss_import.html#L8
buuut..
That would mean we have to "trust" the feed, which is an external site to not have any HTML injection.
Possibly we could also selectively just escape the characters by using the removtags filter before unescaping... but in the end, here is the issue but not a PR since I did not see that in production.
The text was updated successfully, but these errors were encountered: