also sanitize imported json

1 files changed, 8 insertions, 3 deletions

diff --git a/utility/importparser.php b/utility/importparser.php
index 38dec4b44..36e196ae4 100644
--- a/utility/importparser.php
+++ b/utility/importparser.php
@@ -33,9 +33,11 @@ use \OCA\News\Db\Item;
 class ImportParser {
 
 	private $timeFactory;
+	private $purifier;
 
-	public function __construct(TimeFactory $timeFactory) {
+	public function __construct(TimeFactory $timeFactory, $purifier) {
 		$this->timeFactory = $timeFactory;
+		$this->purifier = $purifier;
 	}
 
 	public function parse($json){
@@ -76,9 +78,12 @@ class ImportParser {
 				}
 				
 				if(array_key_exists('summary', $entry)) {
-					$item->setBody($entry['summary']['content']);
+					$item->setBody($this->purifier->purify(
+						$entry['summary']['content']));
+
 				} elseif(array_key_exists('content', $entry)) {
-					$item->setBody($entry['content']['content']);
+					$item->setBody($this->purifier->purify(
+						$entry['content']['content']));
 				}