Logo
Explore Help
Register Sign In
wanwu/sub2api
1
0
Fork 0
You've already forked sub2api
mirror of https://gitee.com/wanwujie/sub2api synced 2026-04-13 03:14:46 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
bf6fe5e9626c2f32ef5d12cc86003f5c9585c1fd
sub2api/frontend/src/utils/sanitize.ts

7 lines
194 B
TypeScript
Raw Normal View History

fix: custom menu security hardening and code quality improvements - Add admin menu permission check in CustomPageView (visibility + role) - Sanitize SVG content with DOMPurify before v-html rendering (XSS prevention) - Decouple router.go from dto package using anonymous struct - Consolidate duplicate parseCustomMenuItems into dto.ParseCustomMenuItems - Enhance menu item validation (count, length, ID uniqueness limits) - Add audit logging for purchase_subscription and custom_menu_items changes - Update API contract test to include custom_menu_items field Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-03 02:18:19 +08:00
import DOMPurify from 'dompurify'
export function sanitizeSvg(svg: string): string {
if (!svg) return ''
return DOMPurify.sanitize(svg, { USE_PROFILES: { svg: true, svgFilters: true } })
}
Reference in New Issue Copy Permalink
Powered by Gitea Version: 25.4.3 Page: 51ms Template: 2ms
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API