- let creator = note
- .attributed_to
- .dereference(context, local_instance(context), request_counter)
- .await?;
- let recipient = note.to[0]
- .dereference(context, local_instance(context), request_counter)
- .await?;
- check_person_block(creator.id, recipient.id, context.pool()).await?;
-
- let form = PrivateMessageForm {
+ let creator = note.attributed_to.dereference(context).await?;
+ let recipient = note.to[0].dereference(context).await?;
+ check_person_block(creator.id, recipient.id, &mut context.pool()).await?;
+
+ let content = read_from_string_or_source(¬e.content, &None, ¬e.source);
+ let content = sanitize_html(&content);
+
+ let form = PrivateMessageInsertForm {