From cff0d1601f2478bb45501af3d537f885757dc0f5 Mon Sep 17 00:00:00 2001 From: Moriz Wahl Date: Thu, 24 Nov 2022 17:52:12 +0100 Subject: [PATCH] fix(backend): sanitize group description --- backend/src/middleware/xssMiddleware.js | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/backend/src/middleware/xssMiddleware.js b/backend/src/middleware/xssMiddleware.js index 9c528b589..9d08aff8e 100644 --- a/backend/src/middleware/xssMiddleware.js +++ b/backend/src/middleware/xssMiddleware.js @@ -1,7 +1,13 @@ import walkRecursive from '../helpers/walkRecursive' import { cleanHtml } from '../middleware/helpers/cleanHtml.js' -const fields = ['content', 'contentExcerpt', 'reasonDescription'] +const fields = [ + 'content', + 'contentExcerpt', + 'reasonDescription', + 'description', + 'descriptionExcerpt', +] export default { Mutation: async (resolve, root, args, context, info) => {