Temporarly remove the raw html escape. Will renable once it's secure. References #14

butterfly/__init__.py

@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-__version__ = '1.2.4'
+__version__ = '1.2.5'
 
 
 import os

butterfly/static/coffees/term.coffee

@@ -785,22 +785,23 @@ class Terminal
                                     @title = @params[1] + " - ƸӜƷ butterfly"
                                     @handleTitle @title
 
-                            when 99
-                                # Custom escape to produce raw html
-                                html = "<div class=\"inline-html\">" + @params[1] + "</div>"
-                                @lines[@y + @ybase][@x] = [
-                                    @curAttr
-                                    html
-                                ]
-                                line = 0
+                            # Disabling this for now as we need a good script striper to avoid malicious script injection
+                            # when 99
+                            #     # Custom escape to produce raw html
+                            #     html = "<div class=\"inline-html\">" + @params[1] + "</div>"
+                            #     @lines[@y + @ybase][@x] = [
+                            #         @curAttr
+                            #         html
+                            #     ]
+                            #     line = 0
 
-                                while line < @get_html_height_in_lines(html) - 1
-                                    @y++
-                                    if @y > @scrollBottom
-                                        @y--
-                                        @scroll()
-                                    line++
-                                @updateRange @y
+                            #     while line < @get_html_height_in_lines(html) - 1
+                            #         @y++
+                            #         if @y > @scrollBottom
+                            #             @y--
+                            #             @scroll()
+                            #         line++
+                            #     @updateRange @y
 
                         # reset colors
                         @params = []