TRKJ/EdgeAdmin
2
0
Fork 0
mirror of https://github.com/TeaOSLab/EdgeAdmin.git synced 2025-11-09 16:50:26 +08:00
Code Issues Packages Projects Releases Wiki Activity

修复<keyword>组件的安全问题

Browse Source
This commit is contained in:
GoEdgeLab
2021-07-12 17:35:33 +08:00
parent fad6b30a8e
commit 4bbb3bde74
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
web/public/js/components/common/keyword.js
View File

@@ -13,7 +13,7 @@ Vue.component("keyword", {
} }
let slot = this.$slots["default"][0] let slot = this.$slots["default"][0]
let text = slot.text let text = this.encodeHTML(slot.text)
if (word.length > 0) { if (word.length > 0) {
text = text.replace(new RegExp("(" + word + ")", "ig"), "<span style=\"border: 1px #ccc dashed; color: #ef4d58\">$1</span>") text = text.replace(new RegExp("(" + word + ")", "ig"), "<span style=\"border: 1px #ccc dashed; color: #ef4d58\">$1</span>")
} }
@@ -23,5 +23,13 @@ Vue.component("keyword", {
text: text text: text
} }
}, },
methods: {
encodeHTML: function (s) {
s = s.replace("&", "&amp;")
s = s.replace("<", "&lt;")
s = s.replace(">", "&gt;")
return s
}
},
template: `<span><span style="display: none"><slot></slot></span><span v-html="text"></span></span>` template: `<span><span style="display: none"><slot></slot></span><span v-html="text"></span></span>`
}) })