From 10b0591e0b1518279d97ff9b86cce5f77dfc2b3a Mon Sep 17 00:00:00 2001
From: DuckieTM <info@camwijs.nl>
Date: Sun, 24 Mar 2024 18:27:56 +0100
Subject: [PATCH] Added: sanitize check for Emoji

---
 package.json                                               | 2 +-
 src/components/room/widgets/chat/ChatWidgetMessageView.tsx | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index 1ec86fe..c17108a 100644
--- a/package.json
+++ b/package.json
@@ -15,7 +15,7 @@
     "@emoji-mart/react": "^1.1.1",
     "@nitrots/nitro-renderer": "file:submodules/renderer",
     "@tanstack/react-virtual": "^3.0.0-beta.60",
-    "dompurify": "^3.0.9",
+    "dompurify": "^3.0.11",
     "emoji-mart": "^5.5.2",
     "emoji-toolkit": "8.0.0",
     "react": "^18.2.0",
diff --git a/src/components/room/widgets/chat/ChatWidgetMessageView.tsx b/src/components/room/widgets/chat/ChatWidgetMessageView.tsx
index 089ad94..af905cc 100644
--- a/src/components/room/widgets/chat/ChatWidgetMessageView.tsx
+++ b/src/components/room/widgets/chat/ChatWidgetMessageView.tsx
@@ -79,7 +79,7 @@ export const ChatWidgetMessageView: FC<ChatWidgetMessageViewProps> = props => {
 
     return (
         <div ref={elementRef} className={`bubble-container newbubblehe ${isVisible ? 'visible' : 'invisible'}`} onClick={event => GetRoomEngine().selectRoomObject(chat.roomId, chat.senderId, RoomObjectCategory.UNIT)}>
-            {selectedEmoji && <span>{selectedEmoji}</span>}
+            {selectedEmoji && <span>{DOMPurify.sanitize(selectedEmoji)}</span>}
 			{ (chat.styleId === 0) &&
                 <div className="user-container-bg" style={ { backgroundColor: chat.color } } /> }
             <div className={ `chat-bubble bubble-${ chat.styleId } type-${ chat.type }` } style={ { maxWidth: getBubbleWidth } }>