1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-web synced 2025-03-30 19:56:21 +00:00

Escape HTML

This commit is contained in:
Dmitry Lyzo 2022-01-30 00:27:26 +03:00
parent 08cbc5aa8f
commit 59adbc348a
60 changed files with 245 additions and 192 deletions

View file

@ -5,6 +5,7 @@
* @module components/mediaLibraryEditor/mediaLibraryEditor
*/
import escapeHtml from 'escape-html';
import 'jquery';
import loading from '../loading/loading';
import dialogHelper from '../dialogHelper/dialogHelper';
@ -111,11 +112,11 @@ import template from './mediaLibraryEditor.template.html';
html += `<div class="listItem listItem-border lnkPath" data-index="${index}" style="padding-left:.5em;">`;
html += `<div class="${pathInfo.NetworkPath ? 'listItemBody two-line' : 'listItemBody'}">`;
html += '<h3 class="listItemBodyText">';
html += pathInfo.Path;
html += escapeHtml(pathInfo.Path);
html += '</h3>';
if (pathInfo.NetworkPath) {
html += `<div class="listItemBodyText secondary">${pathInfo.NetworkPath}</div>`;
html += `<div class="listItemBodyText secondary">${escapeHtml(pathInfo.NetworkPath)}</div>`;
}
html += '</div>';
@ -213,7 +214,7 @@ export class showEditor {
dlg.classList.add('background-theme-a');
dlg.classList.add('formDialog');
dlg.innerHTML = globalize.translateHtml(template);
dlg.querySelector('.formDialogHeaderTitle').innerHTML = options.library.Name;
dlg.querySelector('.formDialogHeaderTitle').innerText = options.library.Name;
initEditor(dlg, options);
dlg.addEventListener('close', onDialogClosed);
dialogHelper.open(dlg);