marcel/mermaid
1
0
Fork 0
mirror of https://github.com/mermaid-js/mermaid.git synced 2025-09-21 00:09:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

#2209 Combining sanitasion approaches

Browse Source
This commit is contained in:
Knut Sveidqvist
2021-07-29 18:05:13 +02:00
parent 52b1b23d47
commit 69a1bb99ac
2 changed files with 33 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
src/diagrams/common/common.js
View File

@@ -36,8 +36,36 @@ export const removeScript = (txt) => {
return rs;
};
const sanitizeMore = (text, config) => {
let txt = text;
let htmlLabels = true;
if (
config.flowchart &&
(config.flowchart.htmlLabels === false || config.flowchart.htmlLabels === 'false')
) {
htmlLabels = false;
}
if (htmlLabels) {
const level = config.securityLevel;
if (level === 'antiscript') {
txt = removeScript(txt);
} else if (level !== 'loose') {
// eslint-disable-line
txt = breakToPlaceholder(txt);
txt = txt.replace(/</g, '&lt;').replace(/>/g, '&gt;');
txt = txt.replace(/=/g, '&equals;');
txt = placeholderToBreak(txt);
}
}
return txt;
};
export const sanitizeText = (text) => {
const txt = DOMPurify.sanitize(text);
const txt = sanitizeMore(DOMPurify.sanitize(text));
return txt;
};