From 59d5a8b4a8610c727255d46802e54f216cc9bd90 Mon Sep 17 00:00:00 2001 From: grunfink Date: Sun, 9 Nov 2025 10:03:48 +0100 Subject: Ensure the "quote" post attribute is an URL. It seems that Bookwyrm generate "quote" fields for another thing, because why not. --- html.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'html.c') diff --git a/html.c b/html.c index ec7d7bf..ae5adec 100644 --- a/html.c +++ b/html.c @@ -2397,7 +2397,7 @@ xs_html *html_entry(snac *user, xs_dict *msg, int read_only, /* quoted post */ const char *quoted_id = xs_dict_get(msg, "quote"); - if (xs_is_string(quoted_id)) { + if (xs_is_string(quoted_id) && xs_match(quoted_id, "https://*|http://*")) { /** **/ xs *quoted_post = NULL; if (valid_status(object_get(quoted_id, "ed_post))) { -- cgit v1.2.3