修复访问日志XSS漏洞

2025-11-07 23:30:26 +08:00 · 2022-02-23 17:34:54 +08:00
parent 9337f73817
commit 7df7c1957c
3 changed files with 12 additions and 10 deletions
--- a/web/public/js/components/common/keyword.js
+++ b/web/public/js/components/common/keyword.js
@@ -25,9 +25,10 @@ Vue.component("keyword", {
 	},
 	methods: {
 		encodeHTML: function (s) {
-			s = s.replace("&", "&amp;")
-			s = s.replace("<", "&lt;")
-			s = s.replace(">", "&gt;")
+			s = s.replace(/&/g, "&amp;")
+			s = s.replace(/</g, "&lt;")
+			s = s.replace(/>/g, "&gt;")
+			s = s.replace(/"/g, "&quot;")
 			return s
 		}
 	},