update

microweber · Jan 19, 2022 · 6e9fcaa · 6e9fcaa
1 parent 51b5a4e
commit 6e9fcaa
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 7 deletions.
diff --git a/src/MicroweberPackages/Comment/Http/Controllers/CommentController.php b/src/MicroweberPackages/Comment/Http/Controllers/CommentController.php
@@ -33,10 +33,6 @@ public function postComment(Request $request)
             }
         }
 
-
-
-
-
         $rules = [];
         $inputs = $request->all();
         if(isset($inputs['rel']) and !isset($inputs['rel_type'])){
@@ -104,7 +100,7 @@ public function postComment(Request $request)
         }
 
         if (!empty($saveComment['comment_body']) and !empty($inputs['format']) and $inputs['format'] == 'markdown') {
-            $saveComment['comment_body'] = Markdown::convertToHtml($saveComment['comment_body']);
+            $saveComment['comment_body'] = htmlentities($saveComment['comment_body']);
         }
 
         $save = Comment::create($saveComment);

diff --git a/src/MicroweberPackages/Comment/resources/views/admin/comments/comment_item.blade.php b/src/MicroweberPackages/Comment/resources/views/admin/comments/comment_item.blade.php
@@ -58,7 +58,7 @@
                         <div class="js-comment-body-text">{{ $comment['comment_body'] }}</div>
                         <span class="js-comment-body-textarea" style="display: none;">
                             <small class="text-muted">Comment:</small>
-                            <textarea name="comment_body" class="form-control">{{ $comment['comment_body'] }}</textarea>
+                            <textarea name="comment_body" class="form-control">{{ $comment['comment_body'] }}§</textarea>
                         </span>
                     </div>
 

diff --git a/src/MicroweberPackages/Comment/resources/views/admin/notifications/new_comment.blade.php b/src/MicroweberPackages/Comment/resources/views/admin/notifications/new_comment.blade.php
@@ -62,7 +62,7 @@
                         <small class="text-muted">says:</small>
                     </h6>
                     <div>
-                        <p>{!! $notification['comment_body'] !!}</p>
+                        <p>{{ $notification['comment_body'] }}</p>
                     </div>