depau/HackMD
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Use xss in script tag

Browse source
This commit is contained in:
Yukai Huang 2016-10-08 19:56:38 +08:00
parent ab21311161
commit ebee5a8d05
4 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
package.json
View file

@ -92,8 +92,7 @@
"toobusy-js": "^0.5.1",
"visibilityjs": "^1.2.4",
"viz.js": "^1.3.0",
"winston": "^2.2.0",
"xss": "^0.2.13"
"winston": "^2.2.0"
},
"engines": {
"node": ">=4.x"

1
public/js/index.js
View file

@ -42,7 +42,6 @@ require('markdown-it-imsize');
require('gist-embed');
require('lz-string');
require('xss');
require('string');
require('highlight.js');
require('prismjs');

1
public/vendor/xss.min.js vendored Normal file
View file

File diff suppressed because one or more lines are too long

1
public/views/foot.ejs
View file

@ -22,6 +22,7 @@
<script src="<%- url %>/vendor/mermaid/dist/mermaid.min.js" defer></script>
<% } %>
<script src="<%- url %>/vendor/idle.min.js" defer></script>
<script src="<%- url %>/vendor/xss.min.js" defer></script>
<script src="<%- url %>/build/js/app.js" defer></script>
<script src="<%- url %>/js/google-drive-upload.js" defer></script>
<script src="<%- url %>/js/google-drive-picker.js" defer></script>