mirrors
/
navidrome
mirror of https://github.com/navidrome/navidrome.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

Sanitize comments and lyrics on import, as they are rendered as HTML on the UI

This commit is contained in:
Deluan 2020-11-11 12:26:47 -05:00
parent 5111cf8c33
commit 0e7163eb2c
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
scanner/mapping.go
View File

@ -12,14 +12,16 @@ import (
"github.com/deluan/navidrome/scanner/metadata"
"github.com/deluan/navidrome/utils"
"github.com/kennygrant/sanitize"
"github.com/microcosm-cc/bluemonday"
)
type mediaFileMapper struct {
rootFolder string
policy *bluemonday.Policy
}
func newMediaFileMapper(rootFolder string) *mediaFileMapper {
return &mediaFileMapper{rootFolder: rootFolder}
return &mediaFileMapper{rootFolder: rootFolder, policy: bluemonday.UGCPolicy()}
}
func (s *mediaFileMapper) toMediaFile(md metadata.Metadata) model.MediaFile {
@ -59,8 +61,8 @@ func (s *mediaFileMapper) toMediaFile(md metadata.Metadata) model.MediaFile {
mf.MbzAlbumArtistID = md.MbzAlbumArtistID()
mf.MbzAlbumType = md.MbzAlbumType()
mf.MbzAlbumComment = md.MbzAlbumComment()
mf.Comment = md.Comment()
mf.Lyrics = md.Lyrics()
mf.Comment = s.policy.Sanitize(md.Comment())
mf.Lyrics = s.policy.Sanitize(md.Lyrics())
// TODO Get Creation time. https://github.com/djherbis/times ?
mf.CreatedAt = md.ModificationTime()