Skip to content

Commit 67e4623

Browse files
committed
fix: HTML sanitizer shouldn't sanitize the timestamp fields
1 parent e1957a8 commit 67e4623

1 file changed

Lines changed: 7 additions & 1 deletion

File tree

platform-core/platform-common/src/main/java/org/sunbird/common/HtmlSanitizer.java

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,12 @@ public class HtmlSanitizer {
3232
"question", "responseDeclaration", "outcomeDeclaration"
3333
));
3434

35+
private static final Set<String> IGNORE_FIELDS = new HashSet<>(Arrays.asList(
36+
"createdOn", "lastUpdatedOn", "lastStatusChangedOn", "lastPublishedOn",
37+
"lastSubmittedOn", "versionDate", "artifactUrl", "downloadUrl", "previewUrl",
38+
"streamingUrl", "appIcon", "posterImage", "toc_url"
39+
));
40+
3541
public static String sanitizeStrict(String input) {
3642
if (StringUtils.isBlank(input)) return input;
3743
return STRICT_POLICY.sanitize(input);
@@ -52,7 +58,7 @@ public static String escapeHtml(String input) {
5258
}
5359

5460
public static String sanitizeField(String fieldName, String value) {
55-
if (StringUtils.isBlank(value)) return value;
61+
if (StringUtils.isBlank(value) || IGNORE_FIELDS.contains(fieldName)) return value;
5662
if (RICH_TEXT_FIELDS.contains(fieldName)) {
5763
return sanitizeRichText(value);
5864
}

0 commit comments

Comments
 (0)