Merge pull request #33761 from dimagi/update-vellum

Update Vellum (sanitize comments)
dimagi · Nov 15, 2023 · 7d93c9a · 7d93c9a
2 parents 3af4020 + 70b075a
commit 7d93c9a
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 6 deletions.
diff --git a/corehq/apps/app_manager/static/app_manager/js/vellum/manifest.txt b/corehq/apps/app_manager/static/app_manager/js/vellum/manifest.txt
@@ -1007,4 +1007,4 @@
 │  ├─ buffer-crc32@~0.2.3
 │  └─ fd-slicer@~1.1.0
 └─ [email protected]
-Done in 0.14s.
+Done in 0.15s.
diff --git a/corehq/apps/app_manager/static/app_manager/js/vellum/src/main-components.js b/corehq/apps/app_manager/static/app_manager/js/vellum/src/main-components.js
@@ -28684,9 +28684,11 @@ define('vellum/tsv',[
 });
 
 define('vellum/exporter',[
-    'vellum/tsv'
+    'vellum/tsv',
+    'vellum/richText'
 ], function (
-    tsv
+    tsv,
+    richText
 ) {
     // todo: abstract out IText stuff into part of the plugin interface
     var generateExportTSV = function (form) {
@@ -28775,7 +28777,7 @@ define('vellum/exporter',[
 
             row["Hint Text"] = defaultOrNothing(mug.p.hintItext, defaultLanguage, 'default');
             row["Help Text"] = defaultOrNothing(mug.p.helpItext, defaultLanguage, 'default');
-            row.Comment = mug.p.comment;
+            row.Comment = richText.sanitizeInput(mug.p.comment);
 
             // make sure there aren't any null values
             for (var prop in row) {
@@ -48665,7 +48667,7 @@ define('vellum/core',[
             form = this.data.core.form,
             mugs = multiselect ? mug : [mug],
             $baseToolbar = $(question_toolbar({
-                comment: multiselect ? '' : mug.p.comment,
+                comment: multiselect ? '' : richText.sanitizeInput(mug.p.comment),
                 isDeleteable: mugs && mugs.length && _.every(mugs, function (mug) {
                     return _this.isMugRemoveable(mug, mug.hashtagPath);
                 }),

diff --git a/corehq/apps/app_manager/static/app_manager/js/vellum/version.txt b/corehq/apps/app_manager/static/app_manager/js/vellum/version.txt
@@ -1 +1 @@
-9f539058684ab5d834fcad120e5b41c9550536b6
+9d2f2db789028bd2901ddfdc676c0b28879165a4
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		9f539058684ab5d834fcad120e5b41c9550536b6
		9d2f2db789028bd2901ddfdc676c0b28879165a4