Use ammonia to clean user desc before sending to clientcleanup-user-desc

Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
Suggested-by: Colin Reeder <colin@vpzom.click>
CC: Colin Reeder <colin@vpzom.click>

1 files changed, 3 insertions, 1 deletions

diff --git a/src/routes/api/users.rs b/src/routes/api/users.rs
index ad1d77d..412dec1 100644
--- a/src/routes/api/users.rs
+++ b/src/routes/api/users.rs
@@ -561,9 +561,11 @@ async fn route_unstable_users_get(
         }),
     };
 
+    let clean_user_desc = ammonia::clean(row.get(3));
+
     let info = RespUserInfo {
         base: info,
-        description: row.get(3),
+        description: &clean_user_desc,
         suspended: if local { Some(row.get(5)) } else { None },
         your_note,
     };