Andreas/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2026-01-05 00:08:49 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

🐛 Search dialog XSS Fix https://github.com/siyuan-note/siyuan/issues/8525

Browse source
This commit is contained in:
Daniel 2023-06-13 09:34:36 +08:00
parent 88fa157bf2
commit 4153d22acb
No known key found for this signature in database
GPG key ID: 86211BA83DF03017
2 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

5
kernel/model/blockinfo.go
View file

@ -27,6 +27,7 @@ import (
"github.com/88250/gulu"
"github.com/88250/lute/ast"
"github.com/88250/lute/editor"
"github.com/88250/lute/html"
"github.com/88250/lute/parse"
"github.com/siyuan-note/logging"
"github.com/siyuan-note/siyuan/kernel/sql"
@ -309,7 +310,7 @@ func buildBlockBreadcrumb(node *ast.Node, excludeTypes []string) (ret []*BlockPa
if add {
ret = append([]*BlockPath{{
ID: id,
Name: name,
Name: html.EscapeString(name),
Type: parent.Type.String(),
SubType: treenode.SubTypeAbbr(parent),
}}, ret...)
@ -330,7 +331,7 @@ func buildBlockBreadcrumb(node *ast.Node, excludeTypes []string) (ret []*BlockPa
name = gulu.Str.SubStr(renderBlockText(b, excludeTypes), maxNameLen)
ret = append([]*BlockPath{{
ID: b.ID,
Name: name,
Name: html.EscapeString(name),
Type: b.Type.String(),
SubType: treenode.SubTypeAbbr(b),
}}, ret...)