diff --git a/backend/src/helpers/walkRecursive.ts b/backend/src/helpers/walkRecursive.ts index 4f7adf497..f3be67575 100644 --- a/backend/src/helpers/walkRecursive.ts +++ b/backend/src/helpers/walkRecursive.ts @@ -9,7 +9,6 @@ function walkRecursive(data, fields, fieldName, callback, _key?) { if (!Array.isArray(fields)) { throw new Error('please provide an fields array for the walkRecursive helper') } - // console.log(_key) const fieldDef = fields.find((f) => f.field === _key) if (data && typeof data === 'string' && fieldDef) { if (!fieldDef.excludes?.includes(fieldName)) data = callback(data, _key) diff --git a/backend/src/middleware/xssMiddleware.ts b/backend/src/middleware/xssMiddleware.ts index 33fdcf2c6..c10997e8d 100644 --- a/backend/src/middleware/xssMiddleware.ts +++ b/backend/src/middleware/xssMiddleware.ts @@ -3,7 +3,7 @@ import { cleanHtml } from '../middleware/helpers/cleanHtml' // exclamation mark separetes field names, that should not be sanitized const fields = [ - { field: 'content', excludes: ['message'] }, + { field: 'content', excludes: ['CreateMessage', 'Message'] }, { field: 'contentExcerpt' }, { field: 'reasonDescription' }, { field: 'description', excludes: ['embed'] },