Use v-dompurify-html in SQText to prevent XSS (#1309)

The SQText dashboard component rendered TinyMCE output with v-html,
bypassing the DOMPurify sanitization used by every other component.
Replace with v-dompurify-html (already registered globally in main.ts).
This commit is contained in:
sysy
2026-08-05 11:21:14 +08:00
committed by GitHub
parent ec4717e1f1
commit c3f40a5c05
@@ -16,7 +16,7 @@
@keyup.stop
@mousedown.stop
@dblclick.stop="setEdit"
v-html="configItem.propValue"
v-dompurify-html="configItem.propValue"
></div>
<editor
:id="tinymceId"