From 7413bc08cf7fbdd508a88a7ce419cee96576c102 Mon Sep 17 00:00:00 2001
From: kload <kload@kload.fr>
Date: Sun, 23 Aug 2015 10:52:46 +0200
Subject: [PATCH] [fix] No referrer + XSS fix + remove user 'shout' at
 application removal

---
 scripts/remove                  | 2 ++
 sources/client/index.html       | 1 +
 sources/client/views/toggle.tpl | 2 +-
 3 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/scripts/remove b/scripts/remove
index a51421b..642c536 100644
--- a/scripts/remove
+++ b/scripts/remove
@@ -10,5 +10,7 @@ sudo rm -rf /var/www/shout
 sudo rm -f /etc/nginx/conf.d/$domain.d/shout.conf
 sudo rm -f /etc/systemd/system/shout.service
 
+sudo userdel shout
+
 sudo service nginx reload
 sudo yunohost app ssowatconf
diff --git a/sources/client/index.html b/sources/client/index.html
index bf56203..165ff5e 100644
--- a/sources/client/index.html
+++ b/sources/client/index.html
@@ -8,6 +8,7 @@
 	<meta name="apple-mobile-web-app-capable" content="yes">
 	<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
 	<meta name="mobile-web-app-capable" content="yes">
+        <meta name="referrer" content="no-referrer">
 
 	<title>Shout</title>
 
diff --git a/sources/client/views/toggle.tpl b/sources/client/views/toggle.tpl
index 08de2b5..629d821 100644
--- a/sources/client/views/toggle.tpl
+++ b/sources/client/views/toggle.tpl
@@ -9,7 +9,7 @@
 			{{#if thumb}}
 				<img src="{{thumb}}" class="thumb">
 			{{/if}}
-			<div class="head">{{{head}}}</div>
+			<div class="head">{{{parse head}}}</div>
 			<div class="body">
 				{{body}}
 			</div>