Skip to content

Drop Markdown support in bio field

Magdalena Frankiewicz requested to merge add-bio-prefix into master

What does this MR do?

This MR drops the support for Markdown in bio field on user profile page and in user pop-over. Read the discussion below to understand why; in short - supporting Markdown makes bio vulnerable and poses security concerns.

Note: Users API was exposing both bio and bio_html.

Screenshots or Screencasts (strongly suggested)

How to setup and validate locally (strongly suggested)

  1. Visit user profile page http://127.0.0.1:3000/[username]
  2. In case you have no text in bio field yet, go to Edit profile page, add whatever you please, save the changes
  3. Visit again user profile page

Conformity

Availability and Testing

Edited by Magdalena Frankiewicz

Merge request reports

Loading