turboderp-org/exui
1
0
Fork 0
mirror of https://github.com/turboderp-org/exui.git synced 2026-04-20 14:29:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Escape HTML in user blocks

Browse Source
This commit is contained in:
turboderp
2024-03-26 04:57:19 +01:00
parent 94ba8817d2
commit 84be9a4b4f
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
static/chat.js
View File

@@ -20,6 +20,11 @@ function escapeHTML(html) {
.replace(/'/g, "'");
}
function escapeBlock(text) {
return text
.replace(/([\\`*_{}[\]()#+\-.!>])/g, '\\$1');
}
renderer.code = function(code, infostring, escaped) {
const uniqueId = `copy-${Math.random().toString(16).slice(2)}`;
let escapedCode = escapeHTML(code);
@@ -581,7 +586,10 @@ class ChatBlock {
let html = "";
if (name) html += "<div class='name' style='color: " + col + "'>" + name + "</div>"
html += marked.parse(text);
if (this.block.author == "user")
html += marked.parse(escapeBlock(escapeHTML(text)));
else
html += marked.parse(text);
this.textBlock.innerHTML = html;
}