fix: unsafe html warnings (#531)

lxndrblz · Dec 26, 2024 · 056ff32 · 056ff32
1 parent 8f36fa2
commit 056ff32
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 5 deletions.
diff --git a/exampleSite/config/_default/hugo.toml b/exampleSite/config/_default/hugo.toml
@@ -25,7 +25,7 @@ localizedDates = false
 [markup]
     [markup.goldmark]
         [markup.goldmark.renderer]
-        unsafe=true
+        unsafe=false
 
 [taxonomies]
     category = "categories"

diff --git a/layouts/_default/rss.xml b/layouts/_default/rss.xml
@@ -33,11 +33,11 @@
       {{ with .Site.Author.email }}<author>{{.}}{{ with $.Site.Author.name }} ({{.}}){{end}}</author>{{end}}
       <guid>{{ .Permalink }}</guid>
       {{ if eq .Site.Params.rssFullContent true }}
-        <description>{{ .Content | html }}</description>
+        <description>{{ .Content | safeHTML }}</description>
       {{ else if .Description }}
         <description>{{ .Description }}</description>
       {{ else }}
-        <description>{{ .Summary | html }}</description>
+        <description>{{ .Summary | safeHTML }}</description>
       {{ end }}
     </item>
     {{ end }}

diff --git a/layouts/index.html b/layouts/index.html
@@ -55,9 +55,9 @@ <h3><a href="{{ .RelPermalink }}">{{ .Title }}</a></h3>
           <h3><a href="{{ .RelPermalink }}">{{ upper .Title }}</a></h3>
         {{ end }}
         {{ if .Site.Params.fullPostContent }}
-          <p>{{ .Content | markdownify }}</p>
+          <p>{{ .Content | safeHTML }}</p>
         {{ else }}
-          <p>{{ .Summary | markdownify }}</p>
+          <p>{{ .Summary | safeHTML }}</p>
         {{ end }}
         <!-- add read more -->
         {{- if and (.Truncated) (.Site.Params.readMore) -}}