Skip to content

A
antSword
Commit 00030a3e authored by Medicean's avatar Medicean
Browse files
Options

(Fix:ViewSite) 修正ViewSite URL 处的 self-xss

parent b4d8257c
Show whitespace changes
Inline Side-by-side
Showing with 1 addition and 1 deletion
source/modules/viewsite/index.js
View file @ 00030a3e
...@@ -51,7 +51,7 @@ class ViewSite { ...@@ -51,7 +51,7 @@ class ViewSite {
_initToolbar() { _initToolbar() {
const toolbar = this.cell.attachToolbar(); const toolbar = this.cell.attachToolbar();
toolbar.loadStruct([ toolbar.loadStruct([
{ id: 'url', width: 400, type: 'buttonInput', value: this.opts.url || 'loading..' }, { id: 'url', width: 400, type: 'buttonInput', value: antSword.noxss(this.opts.url) || 'loading..' },
{ type: 'separator' }, { type: 'separator' },
{ id: 'useproxy', type: 'buttonTwoState', icon: 'paper-plane', text: LANG['toolbar'].useproxy(this.useproxy), pressed: this.useproxy, disabled: antSword.aproxymode === "noproxy"}, { id: 'useproxy', type: 'buttonTwoState', icon: 'paper-plane', text: LANG['toolbar'].useproxy(this.useproxy), pressed: this.useproxy, disabled: antSword.aproxymode === "noproxy"},
{ type: 'separator' }, { type: 'separator' },
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment