Andreas/wekan
1
0
Fork 0
mirror of https://github.com/wekan/wekan.git synced 2025-12-27 04:38:49 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Fix lint.

Browse source
This commit is contained in:
Lauri Ojansivu 2020-11-29 04:19:28 +02:00
parent baf652a569
commit 9d2a9ee70b
1 changed files with 9 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

14
client/components/main/editor.js
View file

@ -272,10 +272,13 @@ function mySafeAttrValue(tag, name, value, cssFilter) {
// then use your custom function // then use your custom function
if (tag === 'a' && name === 'href') { if (tag === 'a' && name === 'href') {
// only filter the value if starts with 'cbthunderlink:' or 'aodroplink' // only filter the value if starts with 'cbthunderlink:' or 'aodroplink'
if (/^thunderlink:/ig.test(value) || /^cbthunderlink:/ig.test(value) || /^aodroplink:/ig.test(value)) { if (
/^thunderlink:/gi.test(value) ||
/^cbthunderlink:/gi.test(value) ||
/^aodroplink:/gi.test(value)
) {
return value; return value;
} } else {
else {
// use the default safeAttrValue function to process all non cbthunderlinks // use the default safeAttrValue function to process all non cbthunderlinks
return sanitizeXss.safeAttrValue(tag, name, value, cssFilter); return sanitizeXss.safeAttrValue(tag, name, value, cssFilter);
} }
@ -283,7 +286,7 @@ function mySafeAttrValue(tag, name, value, cssFilter) {
// use the default safeAttrValue function to process it // use the default safeAttrValue function to process it
return sanitizeXss.safeAttrValue(tag, name, value, cssFilter); return sanitizeXss.safeAttrValue(tag, name, value, cssFilter);
} }
}; }
// XXX I believe we should compute a HTML rendered field on the server that // XXX I believe we should compute a HTML rendered field on the server that
// would handle markdown and user mentions. We can simply have two // would handle markdown and user mentions. We can simply have two
@ -298,7 +301,8 @@ Blaze.Template.registerHelper(
const view = this; const view = this;
let content = Blaze.toHTML(view.templateContentBlock); let content = Blaze.toHTML(view.templateContentBlock);
const currentBoard = Boards.findOne(Session.get('currentBoard')); const currentBoard = Boards.findOne(Session.get('currentBoard'));
if (!currentBoard) return HTML.Raw(sanitizeXss(content, { safeAttrValue: mySafeAttrValue })); if (!currentBoard)
return HTML.Raw(sanitizeXss(content, { safeAttrValue: mySafeAttrValue }));
const knowedUsers = currentBoard.members.map(member => { const knowedUsers = currentBoard.members.map(member => {
const u = Users.findOne(member.userId); const u = Users.findOne(member.userId);
if (u) { if (u) {