escape post content

7 years ago · 446b125c83
parent c7f3b76b4e
commit 446b125c83
1 changed files with 1 additions and 1 deletions
--- a/src/controllers/admin/postqueue.js
+++ b/src/controllers/admin/postqueue.js
@ -81,7 +81,7 @@ function getQueuedPosts(ids, callback) {
 			});

 			async.map(postData, function (postData, next) {
-				postData.data.rawContent = postData.data.content;
+				postData.data.rawContent = validator.escape(String(postData.data.content));
 				postData.data.title = validator.escape(String(postData.data.title));
 				async.waterfall([
 					function (next) {