mirror of
https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git
synced 2026-11-08 17:26:55 +08:00
Use v-dompurify-html in SQText to prevent XSS (#1309)
The SQText dashboard component rendered TinyMCE output with v-html, bypassing the DOMPurify sanitization used by every other component. Replace with v-dompurify-html (already registered globally in main.ts).
This commit is contained in:
@@ -16,7 +16,7 @@
|
||||
@keyup.stop
|
||||
@mousedown.stop
|
||||
@dblclick.stop="setEdit"
|
||||
v-html="configItem.propValue"
|
||||
v-dompurify-html="configItem.propValue"
|
||||
></div>
|
||||
<editor
|
||||
:id="tinymceId"
|
||||
|
||||
Reference in New Issue
Block a user