Strip html tags in replies

hypothesis · Jan 29, 2025 · 8fc7df1 · 8fc7df1
1 parent c5a2a27
commit 8fc7df1
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/h/templates/emails/reply_notification.html.jinja2 b/h/templates/emails/reply_notification.html.jinja2
@@ -21,7 +21,7 @@
   commented:
 </p>
 
-<blockquote>{{ parent.text or "" }}</blockquote>
+<blockquote>{{ parent.text|striptags or "" }}</blockquote>
 
 <p>
   On
@@ -34,7 +34,7 @@
   replied:
 </p>
 
-<blockquote>{{ reply.text or "" }}</blockquote>
+<blockquote>{{ reply.text|striptags or "" }}</blockquote>
 
 <p><a href="{{ reply_url }}">View the thread and respond</a>.</p>
 

diff --git a/h/templates/emails/reply_notification.txt.jinja2 b/h/templates/emails/reply_notification.txt.jinja2
@@ -2,11 +2,11 @@
 
 On {{ parent.created | human_timestamp }} {{ parent_user_display_name }} commented:
 
-> {{ parent.text or "" }}
+> {{ parent.text|striptags or "" }}
 
 On {{ reply.created | human_timestamp }} {{ reply_user_display_name }} replied:
 
-> {{ reply.text or "" }}
+> {{ reply.text|striptags or "" }}
 
 View the thread and respond: {{ reply_url }}