TryGhost / Ghost-Admin / 3448

70%

push

travis-ci

Escape html for error messages (#956)

no issue

- if we would like to re-add html in our error messages, we have to differentiate between static messages which can contain html and messages which are dynamic and can contain dynamic input, which should not allow html
- e.g. it is always possible that Ghost receives a message from a third party module, which concats static text with input text
- if we want to show html content from an error, we need to come up with a concept
- for now: no support for html in error messages

1707 of 2755 branches covered (61.96%)

4057 of 5679 relevant lines covered (71.44%)

40.84 hits per line