From 1740cc82657156beb4c65b4ed111f169c6c5ed01 Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Sat, 8 Oct 2022 19:40:34 +0800
Subject: [PATCH] refactor(web/group/announcement): drop DOMPurify

---
 web/app/views/page-header.php | 6 +-----
 web/app/views/sidebar.php     | 8 +++-----
 2 files changed, 4 insertions(+), 10 deletions(-)

diff --git a/web/app/views/page-header.php b/web/app/views/page-header.php
index 5d08023..f5ce020 100644
--- a/web/app/views/page-header.php
+++ b/web/app/views/page-header.php
@@ -315,11 +315,7 @@
 								<b><?= $group['title'] ?></b>
 							</a>
 							<?php if ($group_announcement): ?>
-							<div id="announcement-content-<?= $group['id'] ?>"></div>
-							<script>(function(){
-								$('#announcement-content-<?= $group['id'] ?>')
-									.html(DOMPurify.sanitize(decodeURIComponent("<?= rawurlencode($group_announcement) ?>"), <?= DOM_SANITIZE_CONFIG ?>)); 
-							})();</script>
+							<div><?= HTML::pruifier()->purify($group_announcement) ?></div>
 							<?php else: ?>
 							<div>（暂无公告）</div>
 							<?php endif ?>
diff --git a/web/app/views/sidebar.php b/web/app/views/sidebar.php
index dc41b6c..c5175ce 100644
--- a/web/app/views/sidebar.php
+++ b/web/app/views/sidebar.php
@@ -17,11 +17,9 @@
 					<?= $group['title'] ?>
 				</a>
 				<?php if ($group_announcement): ?>
-				<div id="announcement-content-<?= $group['id'] ?>" class="text-break"></div>
-				<script>(function(){
-					$('#announcement-content-<?= $group['id'] ?>')
-						.html(DOMPurify.sanitize(decodeURIComponent("<?= urlencode($group_announcement) ?>"), <?= DOM_SANITIZE_CONFIG ?>)); 
-				})();</script>
+				<div class="text-break">
+					<?= HTML::pruifier()->purify($group_announcement) ?>
+				</div>
 				<?php else: ?>
 				<div>（暂无公告）</div>
 				<?php endif ?>