(cq) replace v-html with v-text to prevent xss

This commit is contained in:
Simon Vieille
2022-08-21 16:12:52 +02:00
parent f058ec10d3
commit d837f1acf5
5 changed files with 8 additions and 8 deletions
+3 -3
View File
@@ -18,7 +18,7 @@ along with this program. If not, see <http://www.gnu.org/licenses/>.
<div>
<ul class="side-menu-setting-list">
<li v-for="item in values" class="side-menu-setting-list-item" v-on:click="showEditForm(item)">
<span v-html="item.en"></span>
<span v-text="item.en"></span>
</li>
</ul>
@@ -29,7 +29,7 @@ along with this program. If not, see <http://www.gnu.org/licenses/>.
<Modal v-if="addForm" @close="hideAddForm">
<div class="modal__content">
<div v-for="lang in langs">
<span class="lang" v-html="lang"></span>
<span class="lang" v-text="lang"></span>
<input type="text" v-model="newValue[lang]" required>
</div>
@@ -42,7 +42,7 @@ along with this program. If not, see <http://www.gnu.org/licenses/>.
<Modal v-if="editForm" @close="hideEditForm">
<div class="modal__content">
<div v-for="lang in langs">
<span class="lang" v-html="lang"></span>
<span class="lang" v-text="lang"></span>
<input type="text" v-model="editValue[lang]" required>
</div>