mirror of
https://github.com/jumpserver/lina.git
synced 2025-09-18 16:32:28 +00:00
fix: xss处理后无class属性
This commit is contained in:
@@ -18,6 +18,7 @@ const options = {
|
||||
if (['src', 'href'].indexOf(name) !== -1) {
|
||||
return name + '=' + value.replace('javascript:', 'java:').replace('data:', 'dt:')
|
||||
}
|
||||
return name + '="' + xss.escapeAttrValue(value) + '"'
|
||||
}
|
||||
}
|
||||
const filter = new xss.FilterXSS(options)
|
||||
|
Reference in New Issue
Block a user