From 34c83e93e07ad3a947c4a7d64ec1ffb05015c6ce Mon Sep 17 00:00:00 2001 From: Adam Kelly Date: Thu, 2 Apr 2020 17:05:22 +0100 Subject: [PATCH] Sanitize the review name as well as content. --- fedireads/status.py | 1 + 1 file changed, 1 insertion(+) diff --git a/fedireads/status.py b/fedireads/status.py index 61832dd9..fa06997a 100644 --- a/fedireads/status.py +++ b/fedireads/status.py @@ -27,6 +27,7 @@ def create_review_from_activity(author, activity): def create_review(user, book, name, content, rating): ''' a book review has been added ''' + name = sanitize(name) content = sanitize(content) # no ratings outside of 0-5