mirrors/jellyfin-web
1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-web synced 2025-03-30 19:56:21 +00:00
Code Activity

fix: Escape HTML

Browse source
This commit is contained in:
Dmitry Lyzo 2022-03-27 01:16:33 +03:00
parent b4fce063b0
commit 9338dd082b
6 changed files with 8 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/components/cardbuilder/cardBuilder.js
View file

@ -949,7 +949,7 @@ import ServerConnections from '../ServerConnections';
}, item.ChannelName));
} else {
lines.push(escapeHtml(item.ChannelName) || ' ');
lines.push(escapeHtml(item.ChannelName || '') || ' ');
}
}
@ -981,7 +981,7 @@ import ServerConnections from '../ServerConnections';
if (item.RecordAnyChannel) {
lines.push(globalize.translate('AllChannels'));
} else {
lines.push(escapeHtml(item.ChannelName) || globalize.translate('OneChannel'));
lines.push(escapeHtml(item.ChannelName || '') || globalize.translate('OneChannel'));
}
}

3
src/components/dashboard/users/CheckBoxListItem.tsx
View file

@ -1,3 +1,4 @@
import escapeHtml from 'escape-html';
import React, { FunctionComponent } from 'react';
type IProps = {
@ -17,7 +18,7 @@ const createCheckBoxElement = ({className, Name, dataAttributes, AppName, checke
class="${className}"
${dataAttributes} ${checkedAttribute}
/>
<span>${Name} ${AppName}</span>
<span>${escapeHtml(Name || '')} ${AppName}</span>
</label>`
});

2
src/components/directorybrowser/directorybrowser.js
View file

@ -267,7 +267,7 @@ class DirectoryBrowser {
html += '<div class="formDialogHeader">';
html += `<button is="paper-icon-button-light" class="btnCloseDialog autoSize" tabindex="-1" title="${globalize.translate('ButtonBack')}"><span class="material-icons arrow_back" aria-hidden="true"></span></button>`;
html += '<h3 class="formDialogHeaderTitle">';
html += escapeHtml(options.header) || globalize.translate('HeaderSelectPath');
html += escapeHtml(options.header || '') || globalize.translate('HeaderSelectPath');
html += '</h3>';
html += '</div>';
html += getEditorHtml(options, systemInfo);

2
src/components/itemidentifier/itemidentifier.js
View file

@ -246,7 +246,7 @@ import template from './itemidentifier.template.html';
} else {
html += '<div class="cardText cardText-secondary cardTextCentered">';
}
html += escapeHtml(lines[i]) || '&nbsp;';
html += escapeHtml(lines[i] || '') || '&nbsp;';
html += '</div>';
}