tommy/mobilizon
1
0
Fork 0
forked from potsda.mn/mobilizon
Code Pull requests Activity

fix(front): escape event.title when it's passed to dialog component HTML message

Browse source 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
This commit is contained in:
Thomas Citharel 2023-12-14 10:57:12 +01:00
parent 83eb5c6a69
commit f4ee116112
No known key found for this signature in database
GPG key ID: A061B9DDE0CA0773
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/components/Event/EventParticipationCard.vue
View file

@ -346,6 +346,7 @@ import { Dialog } from "@/plugins/dialog";
import { Snackbar } from "@/plugins/snackbar"; import { Snackbar } from "@/plugins/snackbar";
import { useDeleteEvent } from "@/composition/apollo/event"; import { useDeleteEvent } from "@/composition/apollo/event";
import Tag from "@/components/TagElement.vue"; import Tag from "@/components/TagElement.vue";
import { escapeHtml } from "@/utils/html";
import Bullhorn from "vue-material-design-icons/Bullhorn.vue"; import Bullhorn from "vue-material-design-icons/Bullhorn.vue";
const props = defineProps<{ const props = defineProps<{
@ -388,7 +389,7 @@ const openDeleteEventModal = (
)} )}
<br><br> <br><br>
${t('To confirm, type your event title "{eventTitle}"', { ${t('To confirm, type your event title "{eventTitle}"', {
eventTitle: event.title, eventTitle: escapeHtml(event.title),
})}`, })}`,
confirmText: t("Delete {eventTitle}", { confirmText: t("Delete {eventTitle}", {
eventTitle: event.title, eventTitle: event.title,