Browse Source

Add more HTML escaping

master
Joe Attardi 2 years ago
parent
commit
fe54bef107
  1. 1
      src/categoryButtons.ts
  2. 6
      src/emojiArea.ts
  3. 2
      src/preview.ts
  4. 3
      src/search.ts

1
src/categoryButtons.ts

@ -1,4 +1,5 @@
import { TinyEmitter as Emitter } from 'tiny-emitter';
import escape from 'escape-html';
import { CLASS_CATEGORY_BUTTONS, CLASS_CATEGORY_BUTTON } from './classes';

6
src/emojiArea.ts

@ -1,4 +1,5 @@
import { TinyEmitter as Emitter } from 'tiny-emitter';
import escape from 'escape-html';
import emojiData from './data/emoji';
import { i18n as defaultI18n } from './i18n';
@ -297,8 +298,9 @@ export class EmojiArea {
emojis: Array<EmojiRecord | RecentEmoji>
): void => {
const name = createElement('h2', CLASS_CATEGORY_NAME);
name.innerHTML =
this.i18n.categories[category] || defaultI18n.categories[category];
name.innerHTML = escape(
this.i18n.categories[category] || defaultI18n.categories[category]
);
this.emojis.appendChild(name);
this.headers.push(name);

2
src/preview.ts

@ -49,7 +49,7 @@ export class EmojiPreview {
}
this.emoji.innerHTML = content;
this.name.innerHTML = emoji.name;
this.name.innerHTML = escape(emoji.name);
}
hidePreview(): void {

3
src/search.ts

@ -1,4 +1,5 @@
import { TinyEmitter as Emitter } from 'tiny-emitter';
import escape from 'escape-html';
import * as icons from './icons';
@ -40,7 +41,7 @@ class NotFoundMessage {
container.appendChild(iconContainer);
const messageContainer = createElement('h2');
messageContainer.innerHTML = this.message;
messageContainer.innerHTML = escape(this.message);
container.appendChild(messageContainer);
return container;

Loading…
Cancel
Save