From 6cf6e6c9ec945037690fd25667e6229b71d4845c Mon Sep 17 00:00:00 2001
From: Armored Dragon <publicmail@armoreddragon.com>
Date: Mon, 8 Jul 2024 11:21:04 -0500
Subject: [PATCH] Disallow all text formatting by default. Removed now
 redundant <script> filtering.

Signed-off-by: Armored Dragon <publicmail@armoreddragon.com>
---
 scripts/communityScripts/armored-chat/armored_chat.qml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/scripts/communityScripts/armored-chat/armored_chat.qml b/scripts/communityScripts/armored-chat/armored_chat.qml
index 8d43d92395..ff945f6a73 100644
--- a/scripts/communityScripts/armored-chat/armored_chat.qml
+++ b/scripts/communityScripts/armored-chat/armored_chat.qml
@@ -509,12 +509,12 @@ Rectangle {
     }
 
     function formatContent(mess) {
+        var arrow = /\</gi
+        mess = mess.replace(arrow, "&lt;");
+
         var link = /https?:\/\/(www\.)?[-a-zA-Z0-9@:%._\+~#=]{1,256}\.[a-zA-Z0-9()]{1,6}\b([-a-zA-Z0-9()@:%_\+.~#?&//=]*)/g;
         mess = mess.replace(link, (match) => {return "<a onclick='Window.openUrl("+match+")' href='" + match + "'>" + match + "</a> <a onclick='Window.openUrl("+match+")'>⮺</a>"});
 
-        var script_tag = /<script\b[^>]*>/gi;
-        mess = mess.replace(script_tag, "script");
-
         var newline = /\n/gi;
         mess = mess.replace(newline, "<br>");
         return mess