Skip to content

Conversation

@davidtaylorhq
Copy link
Contributor

Raw-handlebars will be removed from Discourse core imminently (discourse/discourse#32081)

The usage in custom-user-selector seemed like it was expecting SafeString to actually do something to escape user input. It doesn't actually do any processing to the string. So I removed it, and added escapeExpression around the user input instead.

The usage in wizard-char-counter can be easily replaced with Ember's htmlSafe helper

Raw-handlebars will be removed from Discourse core imminently (discourse/discourse#32081) The usage in `custom-user-selector` seemed like it was expecting SafeString to actually do something to escape user input. It doesn't actually do any processing to the string. So I removed it, and added `escapeExpression` around the user input instead. The usage in wizard-char-counter can be easily replaced with Ember's `htmlSafe` helper
@angusmcleod
Copy link
Member

Thanks @davidtaylorhq.

@angusmcleod angusmcleod merged commit 0e06722 into paviliondev:main Apr 8, 2025
3 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants