sanitize/strip any incoming html

1 files changed, 3 insertions, 1 deletions

diff --git a/main.go b/main.go
index 62d971b..261c247 100644
--- a/main.go
+++ b/main.go
@@ -10,6 +10,7 @@ import (
 	"git.capotej.com/capotej/communique/registry"
 	"github.com/BurntSushi/toml"
 	"github.com/dgraph-io/badger/v3"
+	"github.com/microcosm-cc/bluemonday"
 	"go.uber.org/zap"
 	"go.uber.org/zap/zapio"
 )
@@ -61,7 +62,8 @@ func main() {
 	var mainWg sync.WaitGroup
 
 	// // Internal CGI Servers
-	cgiServers := cgi.NewServers(log, persister, cfg)
+	policy := bluemonday.StrictPolicy()
+	cgiServers := cgi.NewServers(log, persister, cfg, policy)
 	mainWg.Add(1)
 	go cgiServers.Start()