From bdfe6bb38ee407c31742609a28e515880de79e31 Mon Sep 17 00:00:00 2001 From: "(quasar) nebula" Date: Fri, 11 Jul 2025 09:49:40 -0300 Subject: language: don't sanitize anything automatically This will have no unforeseen consequences. Which is to say, no consequences. --- src/data/things/language.js | 14 +++----------- 1 file changed, 3 insertions(+), 11 deletions(-) (limited to 'src') diff --git a/src/data/things/language.js b/src/data/things/language.js index 84e7a946..8d102a67 100644 --- a/src/data/things/language.js +++ b/src/data/things/language.js @@ -388,21 +388,13 @@ export class Language extends Thing { partInProgress += template.slice(lastIndex, match.index); for (const insertionItem of html.smush(insertion).content) { - // Sanitize string arguments in particular. These are taken to come from - // (raw) data and may include special characters that aren't meant to be - // rendered as HTML markup. - // (XXX: This actually sanitizes every value, stringifying numbers - // and booleans also. We haven't checked what impact that has.) - const sanitizedInsertionItem = - this.#sanitizeValueForInsertion(insertionItem); - - if (typeof sanitizedInsertionItem === 'string') { + if (typeof insertionItem === 'string') { // Join consecutive strings together. - partInProgress += sanitizedInsertionItem; + partInProgress += insertionItem; } else { // Push the string part in progress, then the insertion as-is. outputParts.push(partInProgress); - outputParts.push(sanitizedInsertionItem); + outputParts.push(insertionItem); partInProgress = ''; } } -- cgit 1.3.0-6-gf8a5