Fix another clusterfuzz identified issue (go-gitea#15096)

* Fix another clusterfuzz identified issue Signed-off-by: Andrew Thornton <[email protected]>
gfxlabs · Mar 22, 2021 · a587a28 · a587a28
1 parent e6377d5
commit a587a28
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/markup/html.go b/modules/markup/html.go
@@ -327,7 +327,7 @@ func (ctx *postProcessCtx) postProcess(rawHTML []byte) ([]byte, error) {
 	_, _ = res.WriteString("<html><body>")
 
 	// Strip out nuls - they're always invalid
-	_, _ = nulCleaner.WriteString(res, string(tagCleaner.ReplaceAll(rawHTML, []byte("&lt;$1"))))
+	_, _ = res.Write(tagCleaner.ReplaceAll([]byte(nulCleaner.Replace(string(rawHTML))), []byte("&lt;$1")))
 
 	// close the tags
 	_, _ = res.WriteString("</body></html>")