feat/3247 Escape html tags from the slack messages (#3306)
This commit is contained in:
@@ -56,7 +56,7 @@ class Integrations::Slack::SendOnSlackService < Base::SendOnChannelService
|
|||||||
def post_message
|
def post_message
|
||||||
@slack_message = slack_client.chat_postMessage(
|
@slack_message = slack_client.chat_postMessage(
|
||||||
channel: hook.reference_id,
|
channel: hook.reference_id,
|
||||||
text: message_content,
|
text: ActionView::Base.full_sanitizer.sanitize(message_content),
|
||||||
username: sender_name(message.sender),
|
username: sender_name(message.sender),
|
||||||
thread_ts: conversation.identifier,
|
thread_ts: conversation.identifier,
|
||||||
icon_url: avatar_url(message.sender)
|
icon_url: avatar_url(message.sender)
|
||||||
|
|||||||
Reference in New Issue
Block a user