Fix crash in admin interface when viewing a remote user with verified links (#25796)

1 year ago · 9a0cbecd67
parent d979d9fe49
commit 9a0cbecd67
1 changed files with 1 additions and 1 deletions
--- a/app/lib/text_formatter.rb
+++ b/app/lib/text_formatter.rb
@ -60,7 +60,7 @@ class TextFormatter
      suffix      = url[prefix.length + 30..-1]
      cutoff      = url[prefix.length..-1].length > 30

-      <<~HTML.squish
+      <<~HTML.squish.html_safe # rubocop:disable Rails/OutputSafety
        <a href="#{h(url)}" target="_blank" rel="#{rel.join(' ')}" translate="no"><span class="invisible">#{h(prefix)}</span><span class="#{cutoff ? 'ellipsis' : ''}">#{h(display_url)}</span><span class="invisible">#{h(suffix)}</span></a>
      HTML
    rescue Addressable::URI::InvalidURIError, IDN::Idna::IdnaError