Fix - js injection in message input (#1943)

TryQuiet · Oct 9, 2023 · ca6c8ee · ca6c8ee
1 parent ce6501e
commit ca6c8ee
Showing 1 changed file with 1 addition and 21 deletions.
diff --git a/packages/desktop/src/renderer/components/widgets/channels/ChannelInput/ChannelInput.tsx b/packages/desktop/src/renderer/components/widgets/channels/ChannelInput/ChannelInput.tsx
@@ -529,22 +529,6 @@ export const ChannelInputComponent: React.FC<ChannelInputProps> = ({
         direction='column'
         justifyContent='center'
       >
-        {/* <MentionPoper anchorEl={anchorEl} selected={selected}>
-          {mentionsToSelect.map((target, index) => (
-            <MentionElement
-              key={index}
-              name={target.nickname}
-              highlight={index === selected}
-              onMouseEnter={() => {
-                setSelected(index)
-              }}
-              channelName={channelName}
-              onClick={e => {
-                mentionSelectAction(e)
-              }}
-            />
-          ))}
-        </MentionPoper> */}
         <Grid
           container
           direction='row'
@@ -586,18 +570,14 @@ export const ChannelInputComponent: React.FC<ChannelInputProps> = ({
                   onChange={onChangeCb}
                   onKeyDown={onKeyDownCb}
                   onPaste={async e => {
-                    e.preventDefault()
                     const files = e.clipboardData.files
+                    if (files.length) e.preventDefault()
                     for (let i = 0; i < files.length; i++) {
                       const fileExt = path.extname(files[i].name).toLowerCase()
                       const fileName = path.basename(files[i].name, fileExt)
                       const arrayBuffer = await files[i].arrayBuffer()
                       handleClipboardFiles(arrayBuffer, fileExt, fileName)
                     }
-                    if (!files.length) {
-                      const text = e.clipboardData.getData('text/plain').replace(/(\r\n|\r|\n)/g, '<br />')
-                      document.execCommand('insertHTML', false, text)
-                    }
                   }}
                   data-testid='messageInput'
                 />