mirror of
https://github.com/zulip/zulip.git
synced 2025-11-02 21:13:36 +00:00
c9796ba7f7
While we could fix this issue by changing the markdown processor, doing so is not a robust solution, because even a momentary bug in the markdown processor could allow cached messages that do not follow our security policy. This change ensures that even if our markdown processor has bugs that result in rendered content that does not properly follow our policy of using rel="noopener noreferrer" on links, we'll still do something reasonable. Co-authored-by: Tim Abbott <tabbott@zulipchat.com> Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
19 lines
607 B
Handlebars
19 lines
607 B
Handlebars
<span class="message_sender no-select">
|
|
<span class="sender_info_hover">
|
|
{{> message_avatar}}
|
|
</span>
|
|
|
|
<span class="sender-status">
|
|
<span class="sender_info_hover sender_name-in-status auto-select" role="button" tabindex="0">{{msg/sender_full_name}}</span>
|
|
{{#if sender_is_bot}}
|
|
<i class="zulip-icon bot" aria-label="{{t 'Bot' }}"></i>
|
|
{{/if}}
|
|
|
|
<span class="rendered_markdown status-message auto-select">{{rendered_markdown status_message}}</span>
|
|
|
|
{{#if edited_status_msg}}
|
|
{{> edited_notice}}
|
|
{{/if}}
|
|
</span>
|
|
</span>
|