Discourse escaping & في Onebox

loic · 16 يناير 2026، 10:45ص

لقد دمجنا للتو تصحيحًا يعالج تلك المشكلة تحديدًا (يجب حلها لجميع Oneboxes):

github.com/discourse/discourse

FIX: Don't escape HTML entities twice in oneboxes

main ← loic/fix-double-escape-onebox

merged 10:40AM - 16 Jan 26 UTC

Flink

+32 -25

Sometimes, HTML entities can be escaped twice, typically when getting sanitized …data from our `Onebox::OpenGraph` class then providing that value to a template. We’re using the Mustache gem to process the Onebox templates, and it will automatically escape HTML entities. This is usually not a problem, but it is for things like ampersands. For example, if the value we provide to the template is `&`, then Mustache will convert it to `&amp;`. This PR fixes that behavior by decoding the result of the sanitization we apply in `Onebox::OpenGraph`. That way, templates will get `&` instead of `&`, thus there won’t be any double escaping.

الموضوع		الردود	مرات العرض
One Box url encoding of already encoded comma Bug	4	1111	27 يونيو 2019
Onebox breaks if there's chinese text in URL Bug	14	1747	27 سبتمبر 2017
Links improperly escaped Bug	4	765	12 أغسطس 2019
Onebox description not showing if first character is double quotation mark Support	1	290	18 يوليو 2022
Onebox links with ampersands don't encode correctly Bug	2	906	7 سبتمبر 2017

Discourse escaping & في Onebox

الموضوعات ذات الصلة