Andreas/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2025-12-30 21:38:48 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

🐛 Attribute values are not escaped https://github.com/siyuan-note/siyuan/issues/16686

Browse source 
Signed-off-by: Daniel <845765@qq.com>
This commit is contained in:
Daniel 2025-12-27 15:10:06 +08:00
parent 3a334d3402
commit 30b4faa65c
No known key found for this signature in database
GPG key ID: 86211BA83DF03017
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
kernel/model/blockial.go
View file

@ -26,6 +26,7 @@ import (
"github.com/88250/gulu"
"github.com/88250/lute/ast"
"github.com/88250/lute/editor"
"github.com/88250/lute/html"
"github.com/88250/lute/parse"
"github.com/araddon/dateparse"
"github.com/siyuan-note/siyuan/kernel/cache"
@ -277,7 +278,7 @@ func setNodeAttrs0(node *ast.Node, nameValues map[string]string) (oldAttrs map[s
// 删除大小写完全匹配的属性
delete(newAttrs, name)
// 保存小写的属性 https://github.com/siyuan-note/siyuan/issues/16447
newAttrs[lowerName] = value
newAttrs[lowerName] = html.EscapeAttrVal(value)
}
}