github/sub2api
4
0 Fork 0
mirror of https://github.com/Wei-Shaw/sub2api.git synced 2026-11-08 16:56:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): HTML-escape site_name 并对 doc_url 统一应用 sanitizeUrl

Browse Source 
Refs #3839 (第 8、12 点)
This commit is contained in:
li committed 2026-07-09 10:03:49 +08:00
1 parent 6f43986c37
commit bfb827b879
9 files changed
+135 -7
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

frontend/src/views/KeyUsageView.vue
+2 -1
View File
@@ -423,6 +423,7 @@ import { useAppStore } from '@/stores'
import LocaleSwitcher from '@/components/common/LocaleSwitcher.vue'
import Icon from '@/components/icons/Icon.vue'
import { buildGatewayUrl } from '@/api/client'
import { sanitizeUrl } from '@/utils/url'
const { t, locale } = useI18n()
const appStore = useAppStore()
@@ -431,7 +432,7 @@ const appStore = useAppStore()
const siteName = computed(() => appStore.cachedPublicSettings?.site_name || appStore.siteName || 'Sub2API')
const siteLogo = computed(() => appStore.cachedPublicSettings?.site_logo || appStore.siteLogo || '')
const docUrl = computed(() => appStore.cachedPublicSettings?.doc_url || appStore.docUrl || '')
const docUrl = computed(() => sanitizeUrl(appStore.cachedPublicSettings?.doc_url || appStore.docUrl || ''))
const githubUrl = 'https://github.com/Wei-Shaw/sub2api'
// ==================== Theme (same as HomeView) ====================