clone/logseq
1
0
Fork 0
mirror of https://github.com/logseq/logseq.git synced 2026-05-05 19:36:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: replace re-find with safe-re-find

Browse Source
This commit is contained in:
Tienson Qin
2021-05-23 12:58:41 +08:00
parent d256982c9c
commit 6c70914150
17 changed files with 61 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/main/frontend/security.cljs
View File

@@ -1,5 +1,6 @@
(ns frontend.security
(:require [clojure.walk :as walk]))
(:require [clojure.walk :as walk]
[frontend.util :as util]))
;; To prevent from cross-site scripting vulnerability, we should add security checks for both hiccup and raw html.
;; Hiccup: [:a {:href "javascript:alert('hei')"} "click me"]
@@ -11,7 +12,7 @@
(= :a (first f))
(:href (second f))
(:href (second f))
(re-find #"(?i)javascript" (:href (second f)))))
(util/safe-re-find #"(?i)javascript" (:href (second f)))))
(defn remove-javascript-links-in-href
[hiccup]