escape documentation

lyft · Apr 17, 2024 · 6343ba9 · 6343ba9
1 parent d5dff33
commit 6343ba9
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/confidant/routes/credentials.py b/confidant/routes/credentials.py
@@ -640,7 +640,7 @@ def create_credential():
             value = escape(value)
             metadata[key] = value
 
-        # TODO: fix documentation escape
+        data['documentation'] = escape(data.get('documentation'))
 
         sanitized_name = escape(data['name'])
         cred = Credential(
@@ -845,7 +845,8 @@ def update_credential(id):
                 value = escape(value)
                 data['metadata'][key] = value
 
-        # TODO: fix documentation escape
+        if data.get('documentation') != _cred.documentation:
+            data['documentation'] = escape(data.get('documentation'))
 
         update = {
             'name': data.get('name', _cred.name),