Use rdf:HTML type for rich text - display rich text if available
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- JavaScript
- Stars
- 10
- Forks
- 5
- Avg merge
- 2m
- Merged PRs (30d)
- 3
Description
Note the gitter import imports a rich contactsin html. Check that it uses rdf:HTML and change it if necessary.
Before displaying rich text, be sure to sanitize the HTML to avoid, scripts etc etc etc, unsafe URI prefixes, etc.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the Gitter import and the rich-text display path in the chat pane. Verify that imported rich text uses rdf:HTML, then determine how HTML can be sanitized before display; done means rich text is shown when available while scripts and unsafe URI prefixes are excluded.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- frontend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100