增强js workflow_type_formatter和workflow_status_formatter方法兼容性. #2622
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
增强js workflow_type_formatter和workflow_status_formatter方法兼容性。
原因:
bootstrap-table修复安全问题说明
因需要修复安全问题,修改了escapeHTML方法,导致都返回了string类型。
其他说明:
1.archery以后可能会升级bootstrap-table,我先提前兼容一下代码。
2. 假如升级bootstrap-table,后端返回为数组,显示会有问题。 比如redis的 info keyspace。
3. 假如升级bootstrap-table,会解决很早的bug, excel导出时,时间类型值的错误问题。
4. 模拟安全问题示例, 可以提交一个mongo工单,内容如下,提交后。页面会弹框。
db.tab.insert({name:["Hello World! <img src='' onerror='alert(1)' />","Hello World! <img src='' onerror='alert(2)' />"]});