diff --git a/lib/music_library_web/live/artist_live/show.ex b/lib/music_library_web/live/artist_live/show.ex index 928c4985..8315b4a8 100644 --- a/lib/music_library_web/live/artist_live/show.ex +++ b/lib/music_library_web/live/artist_live/show.ex @@ -295,7 +295,7 @@ defmodule MusicLibraryWeb.ArtistLive.Show do placement="left" >
- {Phoenix.HTML.raw(@biography.bio_html)} + {render_bio(@biography)}
r.release_date end, :desc) } end + + # Wikipedia returns sanitized HTML, so we can skip sanitization. + # sobelow_skip ["XSS.Raw"] + defp render_bio(biography) do + {Phoenix.HTML.raw(biography.bio_html)} + end end