Skip to content

Commit f2743ff

Browse files
committed
Fix slide mode contains unclosed tags might cause XSS [Security Issue]
1 parent 9b00afb commit f2743ff

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

public/js/slide.js

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,10 @@
44
require('../css/extra.css')
55
require('../css/site.css')
66

7+
import { preventXSS } from './render'
78
import { md, updateLastChange, removeDOMEvents, finishView } from './extra'
89

9-
const body = $('.slides').text()
10+
const body = preventXSS($('.slides').text())
1011

1112
window.createtime = window.lastchangeui.time.attr('data-createtime')
1213
window.lastchangetime = window.lastchangeui.time.attr('data-updatetime')

0 commit comments

Comments
 (0)