Skip to content
Permalink
Browse files Browse the repository at this point in the history
Use MFM instead of v-html to avoid XSS
  • Loading branch information
syuilo committed Oct 25, 2020
1 parent 1b30d7d commit ec203f7
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions src/client/components/dialog.vue
Expand Up @@ -12,8 +12,8 @@
<Fa :icon="faQuestionCircle" v-if="type === 'question'"/>
<Fa :icon="faSpinner" pulse v-if="type === 'waiting'"/>
</div>
<header v-if="title" v-html="title"></header>
<div class="body" v-if="text" v-html="text"></div>
<header v-if="title"><Mfm :text="title"/></header>
<div class="body" v-if="text"><Mfm :text="text"/></div>
<MkInput v-if="input" v-model:value="inputValue" autofocus :type="input.type || 'text'" :placeholder="input.placeholder" @keydown="onInputKeydown"></MkInput>
<MkSelect v-if="select" v-model:value="selectedValue" autofocus>
<template v-if="select.items">
Expand Down

0 comments on commit ec203f7

Please sign in to comment.