Weishen/Hydro
2
0 Fork 0
mirror of https://gitcode.com/gh_mirrors/hy/Hydro.git synced 2026-10-17 09:36:08 +08:00
Code Issues Packages Projects Releases Wiki Activity

ui: xss fix

Browse Source
This commit is contained in:
undefined committed 2026-07-15 11:08:28 +08:00
1 parent 1721c5767a
commit 28286d69b9
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
packages/ui-default/backendlib/markdown-it-media.ts
+1 -1
View File
@@ -96,7 +96,7 @@ export function Media(md: MarkdownIt, { pdfToolbar = false }: { pdfToolbar?: boo
const supported = ['youtube', 'vimeo', 'vine', 'prezi', 'bilibili', 'youku', 'msoffice'];
md.renderer.rules.video = function tokenizeReturn(tokens, idx) {
let src = md.utils.escapeHtml(tokens[idx].attrGet('src'));
const service = md.utils.escapeHtml(tokens[idx].attrGet('service')).toLowerCase();
const service = tokens[idx].attrGet('service').replace(/[^A-Z0-9]/gi, '').toLowerCase();
if (Hydro?.module?.richmedia?.[service]) {
const result = Hydro?.module?.richmedia[service].get(service, src, md);
if (result) return result;