sanitize-html (#56)

* sanitize-html * try nh3 * revert * remove nh3 import
wmo-im · Apr 23, 2024 · 629f8ca · 629f8ca
1 parent d4e7624
commit 629f8ca
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/wis2box_api/plugins/process/publish_dataset.py b/wis2box_api/plugins/process/publish_dataset.py
@@ -199,14 +199,16 @@ def execute(self, data):
         try:
             # create the message out of the metadata
             msg = metadata
+            # dump the message to a string and sanitize html
+            msg = json.dumps(msg).replace('<', '&lt;').replace('>', '&gt;')
             # publish notification on internal broker
             private_auth = {
                 'username': BROKER_USERNAME,
                 'password': BROKER_PASSWORD
             }
             topic = 'wis2box/dataset/publication'
             publish.single(topic=topic,
-                           payload=json.dumps(msg),
+                           payload=msg,
                            qos=1,
                            retain=False,
                            hostname=BROKER_HOST,