Sanitize incoming html

2020-12-16 16:47:05 -08:00
parent d79a756813
commit a3c7d324d6
8 changed files with 62 additions and 11 deletions
--- a/bookwyrm/models/user.py
+++ b/bookwyrm/models/user.py
@ -42,7 +42,7 @@ class User(OrderedCollectionPageMixin, AbstractUser):
        blank=True,
    )
    outbox = fields.RemoteIdField(unique=True)
-    summary = fields.TextField(default='')
+    summary = fields.HtmlField(default='')
    local = models.BooleanField(default=False)
    bookwyrm_user = fields.BooleanField(default=True)
    localname = models.CharField(