depau
/
HackMD
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix slide mode contains unclosed tags might cause XSS [Security Issue]

This commit is contained in:
Wu Cheng-Han 2017-09-27 18:21:28 +08:00
parent 9b00afb863
commit f2743ff8f8
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
public/js/slide.js
View File

@ -4,9 +4,10 @@
require('../css/extra.css')
require('../css/site.css')
import { preventXSS } from './render'
import { md, updateLastChange, removeDOMEvents, finishView } from './extra'
const body = $('.slides').text()
const body = preventXSS($('.slides').text())
window.createtime = window.lastchangeui.time.attr('data-createtime')
window.lastchangetime = window.lastchangeui.time.attr('data-updatetime')