修复访问日志XSS漏洞

2025-11-05 14:20:25 +08:00 · 2022-02-23 17:34:54 +08:00
parent 5fe1384e55
commit 619934a275
3 changed files with 12 additions and 10 deletions
--- a/web/public/js/utils.js
+++ b/web/public/js/utils.js
@@ -624,10 +624,10 @@ window.teaweb = {
 		return instance
 	},
 	encodeHTML: function (s) {
-		s = s.replace("&", "&amp;")
-		s = s.replace("<", "&lt;")
-		s = s.replace(">", "&gt;")
-		s = s.replace("\"", "&quot;")
+		s = s.replace(/&/g, "&amp;")
+		s = s.replace(/</g, "&lt;")
+		s = s.replace(/>/g, "&gt;")
+		s = s.replace(/"/, "&quot;")
 		return s
 	}
 }