diff --git a/app/src/protyle/render/av/blockAttr.ts b/app/src/protyle/render/av/blockAttr.ts index 68eb16d0a..8f3e4a370 100644 --- a/app/src/protyle/render/av/blockAttr.ts +++ b/app/src/protyle/render/av/blockAttr.ts @@ -1,6 +1,6 @@ import {fetchPost} from "../../../util/fetch"; import {addCol, getColIconByType} from "./col"; -import {escapeAttr} from "../../../util/escape"; +import {escapeAriaLabel, escapeAttr, escapeHtml} from "../../../util/escape"; import * as dayjs from "dayjs"; import {popTextCell, updateCellsValue} from "./cell"; import {hasClosestBlock, hasClosestByAttribute, hasClosestByClassName} from "../../util/hasClosest"; @@ -71,7 +71,7 @@ export const genAVValueHTML = (value: IAVCellValue) => { if (value.type === "select" && index > 0) { return; } - html += `${item.content}`; + html += `${escapeHtml(item.content)}`; }); break; case "mAsset": @@ -156,6 +156,7 @@ export const renderAVAttribute = (element: HTMLElement, id: string, protyle: IPr key: { type: TAVCol, name: string, + desc: string, icon: string, id: string, options?: { @@ -182,9 +183,9 @@ export const renderAVAttribute = (element: HTMLElement, id: string, protyle: IPr table.keyValues?.forEach(item => { innerHTML += `
-