Skip to content

Commit 20d6b5a

Browse files
committed
fix: update notes preview rendering to use unsafe markdown conversion
- Changed notes preview assignment to use Markdown.render_unsafe for rendering content without sanitization in AdminLive module.
1 parent 8f66de9 commit 20d6b5a

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

lib/algora_web/live/admin/admin_live.ex

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ defmodule AlgoraWeb.Admin.AdminLive do
2424
|> assign(:funnel_data, funnel_data)
2525
|> assign(:selected_period, "30d")
2626
|> assign(:notes_form, to_form(notes_changeset))
27-
|> assign(:notes_preview, (mainthing && Markdown.render(mainthing.content)) || "")
27+
|> assign(:notes_preview, (mainthing && Markdown.render_unsafe(mainthing.content)) || "")
2828
|> assign(:mainthing, mainthing)
2929
|> assign(:notes_edit_mode, false)
3030
|> assign(:notes_full_screen, false)
@@ -244,7 +244,7 @@ defmodule AlgoraWeb.Admin.AdminLive do
244244
{:noreply,
245245
socket
246246
|> assign(:notes_form, to_form(changeset))
247-
|> assign(:notes_preview, Markdown.render(content))}
247+
|> assign(:notes_preview, Markdown.render_unsafe(content))}
248248
end
249249

250250
def handle_event("save_notes", %{"mainthing" => params}, socket) do
@@ -259,7 +259,7 @@ defmodule AlgoraWeb.Admin.AdminLive do
259259
{:noreply,
260260
socket
261261
|> assign(:mainthing, mainthing)
262-
|> assign(:notes_preview, Markdown.render(mainthing.content))
262+
|> assign(:notes_preview, Markdown.render_unsafe(mainthing.content))
263263
|> assign(:notes_edit_mode, false)
264264
|> put_flash(:info, "Notes saved successfully")}
265265

0 commit comments

Comments
 (0)