depau/HackMD
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Fix slide mode contains unclosed tags might cause XSS [Security Issue]

Browse source
This commit is contained in:
Wu Cheng-Han 2017-09-27 18:21:28 +08:00
parent 9b00afb863
commit f2743ff8f8
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
public/js/slide.js
View file

@ -4,9 +4,10 @@
require('../css/extra.css') require('../css/extra.css')
require('../css/site.css') require('../css/site.css')
import { preventXSS } from './render'
import { md, updateLastChange, removeDOMEvents, finishView } from './extra' import { md, updateLastChange, removeDOMEvents, finishView } from './extra'
const body = $('.slides').text() const body = preventXSS($('.slides').text())
window.createtime = window.lastchangeui.time.attr('data-createtime') window.createtime = window.lastchangeui.time.attr('data-createtime')
window.lastchangetime = window.lastchangeui.time.attr('data-updatetime') window.lastchangetime = window.lastchangeui.time.attr('data-updatetime')