#138 - escape html entities in BIO text

c1883f52 · Dave LiPuma · 44831733 · c1883f52
Commit c1883f52 authored 6 years ago by Dave LiPuma
--- a/src/components/user_settings/user_settings.js
+++ b/src/components/user_settings/user_settings.js
@@ -6,7 +6,7 @@ const UserSettings = {
  data () {
    return {
      newName: this.$store.state.users.currentUser.name,
-      newBio: this.$store.state.users.currentUser.description,
+      newBio: this.parseEntities(this.$store.state.users.currentUser.description),
      newLocked: this.$store.state.users.currentUser.locked,
      newNoRichText: this.$store.state.users.currentUser.no_rich_text,
      newDefaultScope: this.$store.state.users.currentUser.default_scope,
@@ -287,6 +287,14 @@ const UserSettings = {
    logout () {
      this.$store.dispatch('logout')
      this.$router.replace('/')
+    },
+    parseEntities (text) {
+      const parser = new DOMParser
+      const dom = parser.parseFromString(
+        '<!doctype html><body>' + text,
+        'text/html')
+      const decodedText = dom.body.textContent
+      return decodedText
    }
  }
 }