Fix severe vulnerability in case of a malicious Piped/YouTube server.

This commit is contained in:
FireMasterK
2021-06-07 00:42:03 +05:30
parent 20ddaab9e3
commit acf81f386f
5 changed files with 19 additions and 6 deletions

View File

@@ -11,6 +11,8 @@ import("uikit/dist/js/uikit-core.min");
import router from "@/router/router";
import App from "./App.vue";
import DOMPurify from 'dompurify';
import("./registerServiceWorker");
const mixin = {
@@ -58,6 +60,9 @@ const mixin = {
return response.json();
});
},
purifyHTML(original) {
return DOMPurify.sanitize(original);
}
},
};