You've already forked AstralRinth
forked from didirus/AstralRinth
@@ -57,7 +57,7 @@ export const configuredXss = new xss.FilterXSS({
|
|||||||
}
|
}
|
||||||
},
|
},
|
||||||
safeAttrValue(tag, name, value, _cssFilter) {
|
safeAttrValue(tag, name, value, _cssFilter) {
|
||||||
if (tag === 'img' && name === 'src') {
|
if (tag === 'img' && name === 'src' && !value.startsWith('data:')) {
|
||||||
try {
|
try {
|
||||||
const url = new URL(value)
|
const url = new URL(value)
|
||||||
|
|
||||||
@@ -72,6 +72,7 @@ export const configuredXss = new xss.FilterXSS({
|
|||||||
'raw.githubusercontent.com',
|
'raw.githubusercontent.com',
|
||||||
'img.shields.io',
|
'img.shields.io',
|
||||||
'i.postimg.cc',
|
'i.postimg.cc',
|
||||||
|
'wsrv.nl',
|
||||||
]
|
]
|
||||||
|
|
||||||
if (!allowedHostnames.includes(url.hostname)) {
|
if (!allowedHostnames.includes(url.hostname)) {
|
||||||
|
|||||||
@@ -17,7 +17,7 @@
|
|||||||
"eslint": "^8.33.0",
|
"eslint": "^8.33.0",
|
||||||
"eslint-config-prettier": "^8.6.0",
|
"eslint-config-prettier": "^8.6.0",
|
||||||
"eslint-plugin-vue": "^9.9.0",
|
"eslint-plugin-vue": "^9.9.0",
|
||||||
"nuxt": "^3.4.1",
|
"nuxt": "^3.4.2",
|
||||||
"prettier": "^2.8.3",
|
"prettier": "^2.8.3",
|
||||||
"sass": "^1.58.0",
|
"sass": "^1.58.0",
|
||||||
"typescript": "^4.9.5",
|
"typescript": "^4.9.5",
|
||||||
|
|||||||
Reference in New Issue
Block a user