From 66c5c6b560f8a6dc8dc386d89627c6065fedfa07 Mon Sep 17 00:00:00 2001 From: undefined Date: Fri, 11 Feb 2022 18:42:21 +0800 Subject: [PATCH] ui: fix check for void tags --- packages/ui-default/backendlib/markdown-it-xss.ts | 3 ++- packages/ui-default/package.json | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/packages/ui-default/backendlib/markdown-it-xss.ts b/packages/ui-default/backendlib/markdown-it-xss.ts index f618a3ce..a89dca66 100644 --- a/packages/ui-default/backendlib/markdown-it-xss.ts +++ b/packages/ui-default/backendlib/markdown-it-xss.ts @@ -1,12 +1,13 @@ import * as Xss from 'xss'; const stack = []; +const voidTags = ['br', 'hr', 'input', 'img', 'link', 'source', 'col', 'area', 'base', 'meta', 'embed', 'param', 'track', 'wbr']; const tagCheck = new Xss.FilterXSS({ css: false, whiteList: {}, onIgnoreTag(tag, html, options) { - if (html.endsWith('/>')) return html; + if (html.endsWith('/>') || voidTags.includes(tag)) return html; if (!options.isClosing) { stack.push(tag); return html; diff --git a/packages/ui-default/package.json b/packages/ui-default/package.json index 06d5be3f..056981b2 100644 --- a/packages/ui-default/package.json +++ b/packages/ui-default/package.json @@ -1,6 +1,6 @@ { "name": "@hydrooj/ui-default", - "version": "4.31.12", + "version": "4.31.13", "author": "undefined ", "license": "AGPL-3.0", "main": "hydro.js",