GithubBackup/MoviePilot-Frontend
1
0
Fork 0
mirror of https://github.com/jxxghp/MoviePilot-Frontend.git synced 2026-09-07 16:56:40 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(plugin): sanitize version history markdown (#496)

Browse Source
This commit is contained in:
InfinityPacer
2026-06-18 19:30:24 +08:00
committed by GitHub
parent fdb34732cc
commit b1787b207d
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/components/dialog/PluginVersionHistoryDialog.vue
+1 -1
View File
@@ -137,7 +137,7 @@ async function loadPluginHistory() {
} }
async function loadPluginReleases(plugin: Plugin | null | undefined = resolvedPlugin.value, force = false) { async function loadPluginReleases(plugin: Plugin | null | undefined = resolvedPlugin.value, force = false) {
if (!plugin?.id || !plugin?.repo_url || !plugin.release) { if (!plugin?.id || !plugin?.repo_url || !plugin?.release) {
releaseDetail.value = null releaseDetail.value = null
releaseError.value = '' releaseError.value = ''
return return
src/components/misc/VersionHistory.vue
+2 -2
View File
@@ -3,9 +3,9 @@ import type { PropType } from 'vue'
import MarkdownIt from 'markdown-it' import MarkdownIt from 'markdown-it'
import mdLinkAttributes from 'markdown-it-link-attributes' import mdLinkAttributes from 'markdown-it-link-attributes'
// 初始化 markdown-it // 版本历史可能来自插件市场或 Release 内容，禁止透传原始 HTML，避免外部内容注入脚本或事件属性。
const md = new MarkdownIt({ const md = new MarkdownIt({
html: true, html: false,
linkify: true, linkify: true,
typographer: true, typographer: true,
}) })