bkinnightskytw
/
InvenTree
mirror of https://github.com/inventree/InvenTree.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Sanitize before uploading

This commit is contained in:
Oliver Walters 2026-05-21 11:46:37 +00:00
parent 689bd1f224
commit 36e81c40c9
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/frontend/src/components/editors/NotesEditor.tsx
View File

@ -162,8 +162,9 @@ export default function NotesEditor({
const blocks = editor.document;
const html = editor.blocksToHTMLLossy(blocks);
const cleanHtml = DOMPurify.sanitize(html);
// TODO: Sanitize the HTML content before sending to the server (or ensure it's sanitized on the back-end)
// Sanitize the HTML content before sending to the server (or ensure it's sanitized on the back-end)
if (selectedNote) {
const url = apiUrl(ApiEndpoints.note_list, selectedNote);
@ -171,7 +172,7 @@ export default function NotesEditor({
notifications.hide('note-update-status');
api
.patch(url, { content: html })
.patch(url, { content: cleanHtml })
.then(() => {
setIsDirty(false);
notifications.show({