CalvinBackup/anonymous_github
1
0
Fork 0
mirror of https://github.com/tdurieux/anonymous_github.git synced 2026-09-12 13:48:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: sanitize Org previews before trusting rendered HTML

Browse Source
This commit is contained in:
tdurieux
2026-09-06 10:46:44 +02:00
parent cf58aa330b
commit b2dfda1838
4 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public/script/app.js
+1 -1
View File
@@ -2961,7 +2961,7 @@ angular
suppressSubScriptHandling: true,
suppressAutoLink: false,
});
$scope.content = $sce.trustAsHtml(orgHTMLDocument.toString());
$scope.content = $sce.trustAsHtml(DOMPurify.sanitize(orgHTMLDocument.toString()));
$scope.type = "html";
}
if (
public/script/vendor.min.js
Vendored
+1 -1
View File
File diff suppressed because one or more lines are too long