From 3f02b0bf56f887fb4cca631bde644d6106335169 Mon Sep 17 00:00:00 2001
From: Nicolas Werner <nicolas.werner@hotmail.de>
Date: Tue, 14 Jan 2020 17:47:30 +0100
Subject: Escape blacklisted html tags

---
 src/timeline/TimelineModel.cpp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/timeline/TimelineModel.cpp')

diff --git a/src/timeline/TimelineModel.cpp b/src/timeline/TimelineModel.cpp
index 3064ab4a..eef4ec31 100644
--- a/src/timeline/TimelineModel.cpp
+++ b/src/timeline/TimelineModel.cpp
@@ -260,8 +260,8 @@ TimelineModel::data(const QString &id, int role) const
                 const static QRegularExpression replyFallback(
                   "<mx-reply>.*</mx-reply>", QRegularExpression::DotMatchesEverythingOption);
                 return QVariant(
-                  utils::replaceEmoji(utils::linkifyMessage(formattedBodyWithFallback(event)))
-                    .remove(replyFallback));
+                  utils::replaceEmoji(utils::linkifyMessage(utils::escapeBlacklistedHtml(
+                    formattedBodyWithFallback(event).remove(replyFallback)))));
         }
         case Url:
                 return QVariant(QString::fromStdString(url(event)));
-- 
cgit 1.5.1