depau/HackMD
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Use xss in script tag

Browse source
This commit is contained in:
Yukai Huang 2016-10-08 19:56:38 +08:00
parent ab21311161
commit ebee5a8d05
4 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
package.json
View file

@ -92,8 +92,7 @@
"toobusy-js": "^0.5.1", "toobusy-js": "^0.5.1",
"visibilityjs": "^1.2.4", "visibilityjs": "^1.2.4",
"viz.js": "^1.3.0", "viz.js": "^1.3.0",
"winston": "^2.2.0", "winston": "^2.2.0"
"xss": "^0.2.13"
}, },
"engines": { "engines": {
"node": ">=4.x" "node": ">=4.x"

1
public/js/index.js
View file

@ -42,7 +42,6 @@ require('markdown-it-imsize');
require('gist-embed'); require('gist-embed');
require('lz-string'); require('lz-string');
require('xss');
require('string'); require('string');
require('highlight.js'); require('highlight.js');
require('prismjs'); require('prismjs');

1
public/vendor/xss.min.js vendored Normal file
View file

File diff suppressed because one or more lines are too long

1
public/views/foot.ejs
View file

@ -22,6 +22,7 @@
<script src="<%- url %>/vendor/mermaid/dist/mermaid.min.js" defer></script> <script src="<%- url %>/vendor/mermaid/dist/mermaid.min.js" defer></script>
<% } %> <% } %>
<script src="<%- url %>/vendor/idle.min.js" defer></script> <script src="<%- url %>/vendor/idle.min.js" defer></script>
<script src="<%- url %>/vendor/xss.min.js" defer></script>
<script src="<%- url %>/build/js/app.js" defer></script> <script src="<%- url %>/build/js/app.js" defer></script>
<script src="<%- url %>/js/google-drive-upload.js" defer></script> <script src="<%- url %>/js/google-drive-upload.js" defer></script>
<script src="<%- url %>/js/google-drive-picker.js" defer></script> <script src="<%- url %>/js/google-drive-picker.js" defer></script>