Andreas/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2026-01-23 08:46:09 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

🔒 XSS in inline-memo https://github.com/siyuan-note/siyuan/issues/15280

Browse source
This commit is contained in:
Daniel 2025-07-12 11:13:25 +08:00
parent 2ea8743fbf
commit 87501a1bdd
No known key found for this signature in database
GPG key ID: 86211BA83DF03017
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/src/protyle/util/onGet.ts
View file

@ -135,7 +135,7 @@ const setHTML = (options: {
}
if (DOMPurify) {
// XSS in inline-memo https://github.com/siyuan-note/siyuan/issues/15280
// XSS in inline memo elements https://github.com/siyuan-note/siyuan/issues/15280
const parser = new DOMParser();
const doc = parser.parseFromString(options.content, "text/html");
doc.querySelectorAll("[data-inline-memo-content]").forEach(item => {