Sea-Studio/MC_Report
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: escape single quotes in U.esc to prevent onclick attribute injection

Browse Source
This commit is contained in:
canglan
2026-07-12 13:09:10 +08:00
parent ea7a3c42be
commit da5aa09421
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
public/js/utils.js
View File

@@ -22,7 +22,7 @@ const U = {
esc(s) { esc(s) {
if (!s) return ''; if (!s) return '';
return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;'); return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;').replace(/'/g,'&#39;');
}, },
showAlert(containerId, type, msg) { showAlert(containerId, type, msg) {