clone/logseq
1
0
Fork 0
mirror of https://github.com/logseq/logseq.git synced 2026-05-05 19:36:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: Database isn't escaped when dumped in the published HTML file

Browse Source 
Related to #1100
This commit is contained in:
Tienson Qin
2021-01-15 19:14:06 +08:00
parent 58d7b1d0bf
commit 2192a4945e
5 changed files with 31 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/main/frontend/security.cljs
View File

@@ -30,15 +30,3 @@
;; Example 2:
;; <div style="padding: 20px; opacity: 0;height: 20px;" onmouseout="alert('Gotcha!')"></div>
;; Copy from hiccup
;; (defn escape-html
;; "Change special characters into HTML character entities."
;; [text]
;; (-> text
;; (string/replace "&" "&amp;")
;; (string/replace "<" "&lt;")
;; (string/replace ">" "&gt;")
;; (string/replace "\"" "&quot;")
;; (string/replace "'" "&apos;")
;; (string/replace #"(?i)javascript:" "")))