fix note history xss

2021-03-27 16:12:46 +08:00
parent 14643d3cf4
commit 0f9733c890
1 changed files with 1 additions and 0 deletions
--- a/public/js/plugins/history.js
+++ b/public/js/plugins/history.js
@ -49,6 +49,7 @@ define('history', [], function() {
            if (this.note.IsMarkdown) {
                wrap = '<pre>';
                wrapEnd = '</pre>';
+                content = trimTitle(content) // for xss
            }
            $historyContent.html(wrap + content + wrapEnd);