inventree/InvenTree
2
0
Fork 0
mirror of https://github.com/inventree/InvenTree.git synced 2026-09-01 17:51:23 +00:00
Code Activity

Sanitize before uploading

Browse Source
This commit is contained in:
Oliver Walters
2026-05-21 11:46:37 +00:00
parent 689bd1f224
commit 36e81c40c9
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/frontend/src/components/editors/NotesEditor.tsx
+3 -2
View File
@@ -162,8 +162,9 @@ export default function NotesEditor({
const blocks = editor.document;
const html = editor.blocksToHTMLLossy(blocks);
const cleanHtml = DOMPurify.sanitize(html);
// TODO: Sanitize the HTML content before sending to the server (or ensure it's sanitized on the back-end)
// Sanitize the HTML content before sending to the server (or ensure it's sanitized on the back-end)
if (selectedNote) {
const url = apiUrl(ApiEndpoints.note_list, selectedNote);
@@ -171,7 +172,7 @@ export default function NotesEditor({
notifications.hide('note-update-status');
api
.patch(url, { content: html })
.patch(url, { content: cleanHtml })
.then(() => {
setIsDirty(false);
notifications.show({