Madeorsk/rudeshark.net
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use MFM instead of v-html to avoid XSS

Browse Source
This commit is contained in:
syuilo 2020-10-25 12:25:13 +09:00
parent 1b30d7d47a
commit ec203f7f79
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/client/components/dialog.vue
View File

@ -12,8 +12,8 @@
<Fa :icon="faQuestionCircle" v-if="type === 'question'"/> <Fa :icon="faQuestionCircle" v-if="type === 'question'"/>
<Fa :icon="faSpinner" pulse v-if="type === 'waiting'"/> <Fa :icon="faSpinner" pulse v-if="type === 'waiting'"/>
</div> </div>
<header v-if="title" v-html="title"></header> <header v-if="title"><Mfm :text="title"/></header>
<div class="body" v-if="text" v-html="text"></div> <div class="body" v-if="text"><Mfm :text="text"/></div>
<MkInput v-if="input" v-model:value="inputValue" autofocus :type="input.type || 'text'" :placeholder="input.placeholder" @keydown="onInputKeydown"></MkInput> <MkInput v-if="input" v-model:value="inputValue" autofocus :type="input.type || 'text'" :placeholder="input.placeholder" @keydown="onInputKeydown"></MkInput>
<MkSelect v-if="select" v-model:value="selectedValue" autofocus> <MkSelect v-if="select" v-model:value="selectedValue" autofocus>
<template v-if="select.items"> <template v-if="select.items">