From f4f9ac0cb4365b307f4e3f65385530e22af9c1bc Mon Sep 17 00:00:00 2001
From: DJ2LS <75909252+DJ2LS@users.noreply.github.com>
Date: Mon, 30 Sep 2024 11:15:38 +0200
Subject: [PATCH] remove html characters in preview

---
 freedata_gui/src/components/chat_conversations.vue | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/freedata_gui/src/components/chat_conversations.vue b/freedata_gui/src/components/chat_conversations.vue
index 5bc95f3b8..83731eaa2 100644
--- a/freedata_gui/src/components/chat_conversations.vue
+++ b/freedata_gui/src/components/chat_conversations.vue
@@ -35,7 +35,7 @@
               {{ details.unread_messages }} new
             </span>
             <br />
-            <small>{{ details.body ? details.body : '<file>' }}</small>
+            <small>{{ sanitizeBody(details.body) || '<file>' }}</small>
           </div>
           <div class="col-3 text-end">
             <small>{{ getDateTime(details.timestamp) }}</small>
@@ -48,6 +48,7 @@
 </template>
 
 <script>
+import DOMPurify from 'dompurify';
 import { setActivePinia } from 'pinia';
 import pinia from '../store/index';
 import { useChatStore } from '../store/chatStore.js';
@@ -117,9 +118,13 @@ function startNewChat() {
   chat.newChatMessage = "Hi there! Nice to meet you!";
 }
 
+function sanitizeBody(body) {
+  return body ? DOMPurify.sanitize(body, { ALLOWED_TAGS: [] }) : null;
+}
+
 export default {
   setup() {
-    return { chat, newChatCall, chatSelected, setMessagesAsRead, processBeaconData, getDateTime, newChat, startNewChat };
+    return { chat, newChatCall, chatSelected, setMessagesAsRead, processBeaconData, getDateTime, newChat, startNewChat, sanitizeBody };
   }
 };
 </script>