Security fixes

slices/main/decorators/posts/decorator.rb

@@ -86,9 +86,9 @@ module Main
         def display_title
           title = name
           if prefix_emoji
-            return "#{prefix_emoji} #{title}"
+            "#{prefix_emoji} #{title}"
           else
-            return title
+            title
           end
         end
 
@@ -154,7 +154,7 @@ module Main
         end
 
         def to_h
-          clean_content = CGI.unescapeHTML(content.gsub(/<\/?[^>]*>/, "")).strip
+          clean_content = Sanitize.fragment(content).strip
           clean_content = clean_content.gsub(prefix_emoji[0], "") if prefix_emoji
           {
             id: slug,