Summary: Sgrepped for `"=~/</"` and manually changed every HTML. Test Plan: This doesn't work yet but it is hopefully one of the last diffs before Phabricator will be undoubtedly HTML safe. Reviewers: epriestley CC: aran, Korvin Maniphest Tasks: T2432 Differential Revision: https://secure.phabricator.com/D4927
29 lines
639 B
PHP
29 lines
639 B
PHP
<?php
|
|
|
|
/**
|
|
* @group maniphest
|
|
*/
|
|
final class ManiphestTaskDescriptionPreviewController
|
|
extends ManiphestController {
|
|
|
|
public function processRequest() {
|
|
$request = $this->getRequest();
|
|
$description = $request->getStr('description');
|
|
|
|
$task = new ManiphestTask();
|
|
$task->setDescription($description);
|
|
|
|
$output = PhabricatorMarkupEngine::renderOneObject(
|
|
$task,
|
|
ManiphestTask::MARKUP_FIELD_DESCRIPTION,
|
|
$request->getUser());
|
|
|
|
$content = hsprintf(
|
|
'<div class="phabricator-remarkup">%s</div>',
|
|
$output);
|
|
|
|
return id(new AphrontAjaxResponse())
|
|
->setContent($content);
|
|
}
|
|
}
|