depau/HackMD
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Fix the < and > symbols are doubly escaped which affected by executing preventXSS twice

Browse source
This commit is contained in:
Wu Cheng-Han 2017-09-27 18:22:49 +08:00
parent f2743ff8f8
commit fe384d80bf
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
public/js/slide.js
View file

@ -55,6 +55,8 @@ const slideOptions = {
const slides = RevealMarkdown.slidify(body, slideOptions) const slides = RevealMarkdown.slidify(body, slideOptions)
$('.slides').html(slides) $('.slides').html(slides)
RevealMarkdown.initialize() RevealMarkdown.initialize()
// fix < and > were doubly escaped
$('.slides')[0].innerHTML = $('.slides')[0].innerHTML.replace(/&amp;lt;/g, '&lt;').replace(/&amp;gt;/g, '&gt;')
removeDOMEvents($('.slides')) removeDOMEvents($('.slides'))
$('.slides').show() $('.slides').show()