Fix malformed HTML causing uncaught error (#13042)

Fix OEmbed preview API leaking existence of private statuses (see #12930)
2020-02-07 15:24:22 +01:00
parent 02236332ba
commit a64973aecf
2 changed files with 13 additions and 5 deletions
--- a/app/lib/formatter.rb
+++ b/app/lib/formatter.rb
@ -46,6 +46,8 @@ class Formatter

  def reformat(html)
    sanitize(html, Sanitize::Config::MASTODON_STRICT)
+  rescue ArgumentError
+    ''
  end

  def plaintext(status)