Fix #3497: Invalid DText denial of service attack.

2018-01-14 14:22:10 -06:00
parent 4f543671a2
commit 88f4a56890
5 changed files with 19 additions and 7 deletions
--- a/app/views/posts/index.html.erb
+++ b/app/views/posts/index.html.erb
@@ -72,7 +72,7 @@
    <%= content_tag :link, nil, rel: "prev", href: prev_page_url %>
  <% end %>
  <% if @post_set.has_wiki? %>
-    <meta name="description" content="<%= @post_set.wiki_page.presenter.blurb %>">
+    <meta name="description" content="<%= strip_dtext(@post_set.wiki_page.presenter.excerpt) %>">
  <% else %>
    <meta name="description" content="<%= Danbooru.config.description %>">
  <% end %>