inventree/InvenTree
2
0
Fork 0
mirror of https://github.com/inventree/InvenTree.git synced 2026-09-02 02:01:20 +00:00
Code Activity

Sanitize before uploading

Browse Source
This commit is contained in:
Oliver Walters
2026-05-21 11:46:37 +00:00
parent 689bd1f224
commit 36e81c40c9
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/frontend/src/components/editors/NotesEditor.tsx
+3 -2
View File
@@ -162,8 +162,9 @@ export default function NotesEditor({
const blocks = editor.document; const blocks = editor.document;
const html = editor.blocksToHTMLLossy(blocks); const html = editor.blocksToHTMLLossy(blocks);
const cleanHtml = DOMPurify.sanitize(html);
// TODO: Sanitize the HTML content before sending to the server (or ensure it's sanitized on the back-end) // Sanitize the HTML content before sending to the server (or ensure it's sanitized on the back-end)
if (selectedNote) { if (selectedNote) {
const url = apiUrl(ApiEndpoints.note_list, selectedNote); const url = apiUrl(ApiEndpoints.note_list, selectedNote);
@@ -171,7 +172,7 @@ export default function NotesEditor({
notifications.hide('note-update-status'); notifications.hide('note-update-status');
api api
.patch(url, { content: html }) .patch(url, { content: cleanHtml })
.then(() => { .then(() => {
setIsDirty(false); setIsDirty(false);
notifications.show({ notifications.show({