sanitize-tooltip

package.json

@@ -23,6 +23,7 @@
     "lodash": "^4.17.4",
     "moment": "^2.20.1",
     "qrious": "^4.0.2",
+    "sanitize-html": "^1.18.2",
     "v-tooltip": "^2.0.0-rc.30",
     "vue": "^2.5.13",
     "vue-chartjs": "^3.1.0",

src/components/links/Transaction.vue

@@ -1,5 +1,5 @@
 <template>
-  <span v-tooltip="smartBridge">
+  <span v-tooltip="sanitizedVendorfield">
     <router-link :to="{ name: 'transaction', params: { id } }" class="hidden md:inline-block whitespace-no-wrap">
       <span v-if="hasDefaultSlot"><slot></slot></span>
       <span v-else>{{ truncate(id) }}</span>
@@ -11,6 +11,8 @@
 </template>
 
 <script type="text/ecmascript-6">
+import sanitizeHtml from 'sanitize-html'
+
 export default {
   props: {
     id: {
@@ -27,6 +29,12 @@ export default {
     hasDefaultSlot() {
       return !!this.$slots.default
     },
+    sanitizedVendorfield() {
+      if (this.smartBridge !== undefined) {
+        return sanitizeHtml(this.smartBridge)
+      }
+      return ""
+    }
   },
 }
 </script>