encrypt/gancio
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix fbclid url sanitizer

Browse Source
This commit is contained in:
lesion
2023-02-08 09:20:48 +01:00
parent ce82e8477c
commit fa91646a6a
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
server/helpers.js
View File

@@ -19,7 +19,7 @@ const DOMPurify = require('dompurify')
const { JSDOM } = require('jsdom') const { JSDOM } = require('jsdom')
const { window } = new JSDOM('<!DOCTYPE html>') const { window } = new JSDOM('<!DOCTYPE html>')
const domPurify = DOMPurify(window) const domPurify = DOMPurify(window)
const url = require('url') const URL = require('url')
domPurify.addHook('beforeSanitizeElements', node => { domPurify.addHook('beforeSanitizeElements', node => {
if (node.hasAttribute && node.hasAttribute('href')) { if (node.hasAttribute && node.hasAttribute('href')) {
@@ -29,7 +29,7 @@ domPurify.addHook('beforeSanitizeElements', node => {
// remove FB tracking param // remove FB tracking param
if (href.includes('fbclid=')) { if (href.includes('fbclid=')) {
try { try {
const url = new url.URL(href) const url = new URL.URL(href)
url.searchParams.delete('fbclid') url.searchParams.delete('fbclid')
node.setAttribute('href', url.href) node.setAttribute('href', url.href)
if (text.includes('fbclid=')) { if (text.includes('fbclid=')) {