fix note history xss https://github.com/leanote/leanote/issues/899

leanote · Mar 27, 2021 · 0d8da7b · 0d8da7b
1 parent 2f3e0e2
commit 0d8da7b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/public/js/dec/history.js b/public/js/dec/history.js
@@ -49,6 +49,7 @@ define(function() {
             if (this.note.IsMarkdown) {
                 wrap = '<pre>';
                 wrapEnd = '</pre>';
+                content = trimTitle(content) // for xss
             }
             $historyContent.html(wrap + content + wrapEnd);