From b95f47005679e25e2da67e0747edfec81d973cfe Mon Sep 17 00:00:00 2001 From: Tom <tw201207@gmail.com> Date: Thu, 13 Nov 2014 02:41:25 -0500 Subject: [PATCH] Typo in comment, and optional semicolon in JS --- src/main/java/com/gitblit/wicket/panels/MarkdownTextArea.java | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/src/main/java/com/gitblit/wicket/panels/MarkdownTextArea.java b/src/main/java/com/gitblit/wicket/panels/MarkdownTextArea.java index f26f7fb..ade92c0 100644 --- a/src/main/java/com/gitblit/wicket/panels/MarkdownTextArea.java +++ b/src/main/java/com/gitblit/wicket/panels/MarkdownTextArea.java @@ -70,7 +70,8 @@ return; } String html = MarkdownUtils.transformGFM(GitBlitWebApp.get().settings(), text, repositoryName); - previewModel.setObject(html); + String safeHtml = GitBlitWebApp.get().xssFilter().relaxed(html); + previewModel.setObject(safeHtml); } public String getText() { -- Gitblit v1.9.1