From 2fca824e349f5fecbf71d940c4521644e92cb0dd Mon Sep 17 00:00:00 2001 From: Paul Martin <paul@paulsputer.com> Date: Wed, 06 Apr 2016 14:49:09 -0400 Subject: [PATCH] Merge pull request #1039 from gitblit/962-Patchset-Revision-Delete --- src/main/java/com/gitblit/wicket/panels/MarkdownTextArea.java | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/src/main/java/com/gitblit/wicket/panels/MarkdownTextArea.java b/src/main/java/com/gitblit/wicket/panels/MarkdownTextArea.java index f26f7fb..ade92c0 100644 --- a/src/main/java/com/gitblit/wicket/panels/MarkdownTextArea.java +++ b/src/main/java/com/gitblit/wicket/panels/MarkdownTextArea.java @@ -70,7 +70,8 @@ return; } String html = MarkdownUtils.transformGFM(GitBlitWebApp.get().settings(), text, repositoryName); - previewModel.setObject(html); + String safeHtml = GitBlitWebApp.get().xssFilter().relaxed(html); + previewModel.setObject(safeHtml); } public String getText() { -- Gitblit v1.9.1