fix note history xss

leanote · Mar 27, 2021 · 0f9733c · 0f9733c
1 parent 14643d3
commit 0f9733c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/public/js/plugins/history.js b/public/js/plugins/history.js
@@ -49,6 +49,7 @@ define('history', [], function() {
             if (this.note.IsMarkdown) {
                 wrap = '<pre>';
                 wrapEnd = '</pre>';
+                content = trimTitle(content) // for xss
             }
             $historyContent.html(wrap + content + wrapEnd);