RevelaNetwork/RevelaOS
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[🔒] Resolved another potential XSS attack

Browse source
This commit is contained in:
ThinLiquid 2023-12-06 19:04:57 +00:00 • committed by GitHub
parent 9a3a611c01
commit 4801c46f73
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/builtin/apps/browser.ts
View file

@ -2,6 +2,7 @@ import icon from '../../assets/icons/web-browser.svg'
import { App } from '../../types' import { App } from '../../types'
import FlowWindow from '../../structures/FlowWindow' import FlowWindow from '../../structures/FlowWindow'
import { sanitize } from '../../utils'
export default class BrowserApp implements App { export default class BrowserApp implements App {
meta = { meta = {
@ -89,7 +90,7 @@ export default class BrowserApp implements App {
if (this === tabManager.activeTab) { if (this === tabManager.activeTab) {
(win.content.querySelector('.toggle') as HTMLElement).innerHTML = 'toggle_off' (win.content.querySelector('.toggle') as HTMLElement).innerHTML = 'toggle_off'
} }
this.iframe.src = win.content.querySelector('input')?.value as string this.iframe.src = sanitize(win.content.querySelector('input')?.value as string)
} else { } else {
if (this === tabManager.activeTab) { if (this === tabManager.activeTab) {
(win.content.querySelector('.toggle') as HTMLElement).innerHTML = 'toggle_on' (win.content.querySelector('.toggle') as HTMLElement).innerHTML = 'toggle_on'
@ -167,7 +168,7 @@ export default class BrowserApp implements App {
if (tabManager.activeTab.proxy) { if (tabManager.activeTab.proxy) {
tabManager.activeTab.iframe.src = `/service/${xor.encode((win.content.querySelector('.inp') as HTMLInputElement).value)}` tabManager.activeTab.iframe.src = `/service/${xor.encode((win.content.querySelector('.inp') as HTMLInputElement).value)}`
} else { } else {
tabManager.activeTab.iframe.src = (win.content.querySelector('.inp') as HTMLInputElement).value tabManager.activeTab.iframe.src = sanitize((win.content.querySelector('.inp') as HTMLInputElement).value)
} }
} }
}) })