Fix action-listops unsafe use of $tw.utils.stringifyList() (#6540)

Fixes #6535
This commit is contained in:
Jeremy Ruston
2022-03-18 10:10:43 +00:00
committed by GitHub
parent c1f123499c
commit b0c4886d23
2 changed files with 59 additions and 2 deletions

View File

@@ -1,3 +1,5 @@
const { makeTiddlerIterator } = require("../wiki");
/*\
title: $:/core/modules/widgets/action-listops.js
type: application/javascript
@@ -71,8 +73,8 @@ ActionListopsWidget.prototype.invokeAction = function(triggeringWidget,
}
if(this.subfilter) {
var inputList = this.wiki.getTiddlerList(this.target,field,index),
subfilter = $tw.utils.stringifyList(inputList) + " " + this.subfilter;
this.wiki.setText(this.target, field, index, $tw.utils.stringifyList(this.wiki.filterTiddlers(subfilter,this)));
subfilter = "[all[]] " + this.subfilter;
this.wiki.setText(this.target, field, index, $tw.utils.stringifyList(this.wiki.filterTiddlers(subfilter,this,this.wiki.makeTiddlerIterator(inputList))));
}
if(this.filtertags) {
var tiddler = this.wiki.getTiddler(this.target),