baoshuo/S2OJ
baoshuo/S2OJ
1
1
Fork 0
mirror of https://github.com/renbaoshuo/S2OJ.git synced 2025-02-16 23:06:42 +00:00
Code Issues Actions Packages Releases Activity

refactor(web/group/announcement): drop DOMPurify

Browse Source
This commit is contained in:
Baoshuo Ren 2022-10-08 19:40:34 +08:00
parent 8b97bdf55e
commit 1740cc8265
Signed by: baoshuo
GPG Key ID: 00CB9680AB29F51A
2 changed files with 4 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
web/app/views/page-header.php
View File

@ -315,11 +315,7 @@
<b><?= $group['title'] ?></b> <b><?= $group['title'] ?></b>
</a> </a>
<?php if ($group_announcement): ?> <?php if ($group_announcement): ?>
<div id="announcement-content-<?= $group['id'] ?>"></div> <div><?= HTML::pruifier()->purify($group_announcement) ?></div>
<script>(function(){
$('#announcement-content-<?= $group['id'] ?>')
.html(DOMPurify.sanitize(decodeURIComponent("<?= rawurlencode($group_announcement) ?>"), <?= DOM_SANITIZE_CONFIG ?>));
})();</script>
<?php else: ?> <?php else: ?>
<div>（暂无公告）</div> <div>（暂无公告）</div>
<?php endif ?> <?php endif ?>

8
web/app/views/sidebar.php
View File

@ -17,11 +17,9 @@
<?= $group['title'] ?> <?= $group['title'] ?>
</a> </a>
<?php if ($group_announcement): ?> <?php if ($group_announcement): ?>
<div id="announcement-content-<?= $group['id'] ?>" class="text-break"></div> <div class="text-break">
<script>(function(){ <?= HTML::pruifier()->purify($group_announcement) ?>
$('#announcement-content-<?= $group['id'] ?>') </div>
.html(DOMPurify.sanitize(decodeURIComponent("<?= urlencode($group_announcement) ?>"), <?= DOM_SANITIZE_CONFIG ?>));
})();</script>
<?php else: ?> <?php else: ?>
<div>（暂无公告）</div> <div>（暂无公告）</div>
<?php endif ?> <?php endif ?>