Andreas/LibreChat
1
0
Fork 0
mirror of https://github.com/danny-avila/LibreChat.git synced 2025-12-19 18:00:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

feat: stricter iframe validation

Browse source
This commit is contained in:
Daniel Avila 2023-09-06 18:37:58 -04:00 • committed by Danny Avila
parent 9a68c107eb
commit cc260105ec
3 changed files with 46 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
client/src/components/Messages/Content/Markdown.tsx
View file

@ -10,7 +10,7 @@ import supersub from 'remark-supersub';
import remarkGfm from 'remark-gfm';
import rehypeRaw from 'rehype-raw';
import CodeBlock from './CodeBlock';
import { langSubset } from '~/utils';
import { langSubset, validateIframe } from '~/utils';
import store from '~/store';
type TCodeProps = {
@ -47,7 +47,7 @@ const Markdown = React.memo(({ content, message, showCursor }: TContentProps) =>
const isInitializing = content === '<span className="result-streaming">█</span>';
const isLatestMessage = message?.messageId === latestMessage?.messageId;
const currentContent = content?.replace('z-index: 1;', '') ?? '';
const isIFrame = currentContent.includes('<iframe');
const isValidIFrame = validateIframe(currentContent);
useEffect(() => {
let timer1: NodeJS.Timeout, timer2: NodeJS.Timeout;
@ -88,7 +88,7 @@ const Markdown = React.memo(({ content, message, showCursor }: TContentProps) =>
[rehypeRaw],
];
if ((!isInitializing || !isLatestMessage) && !isIFrame) {
if ((!isInitializing || !isLatestMessage) && !isValidIFrame) {
rehypePlugins.pop();
}