escaped-html-notifcation

Signed-off-by: Vikalp Rusia <vikalprusia@gmail.com>
rancher-sandbox · Sep 25, 2024 · 27034f3 · 27034f3
1 parent 0efb3bd
commit 27034f3
Showing 1 changed file with 14 additions and 1 deletion.
diff --git a/pkg/rancher-desktop/components/Snapshots.vue b/pkg/rancher-desktop/components/Snapshots.vue
@@ -19,6 +19,7 @@ interface Data {
 interface Methods {
  pollingStart: () => void,
  currentTime: () => string,
+ escapeSnapshotName: (name: string|undefined) => string,
 }
 
 interface Computed {
@@ -85,6 +86,18 @@ export default Vue.extend<Data, Methods, Computed, never>({
 
  return date.format('YYYY-MM-DD HH:mm');
  },
+ escapeSnapshotName(value: string|undefined) {
+ if (!value) {
+ return '';
+ }
+
+ return value
+ .replace(/&/g, '&amp;')
+ .replace(/</g, '&lt;')
+ .replace(/>/g, '&gt;')
+ .replace(/"/g, '&quot;')
+ .replace(/'/g, '&#039;');
+ },
  },
 });
 </script>
@@ -102,7 +115,7 @@ export default Vue.extend<Data, Methods, Computed, never>({
  @close="snapshotEvent=null"
  >
  <span
- v-clean-html="t(`snapshots.info.${ snapshotEvent.type }.${ snapshotEvent.result }`, { snapshot: snapshotEvent.snapshotName, error: snapshotEvent.error }, true)"
+ v-clean-html="t(`snapshots.info.${ snapshotEvent.type }.${ snapshotEvent.result }`, { snapshot: escapeSnapshotName(snapshotEvent.snapshotName), error: snapshotEvent.error }, true)"
  class="event-message"
  />
  <span