Mirrors/keyoxide-web
1
0
Fork 1
mirror of https://codeberg.org/keyoxide/keyoxide-web.git synced 2024-12-22 14:59:29 -07:00
Code Issues Projects Releases Packages Wiki Activity

fix: avoid shadowing escape

Browse source
This commit is contained in:
Yarmo Mackenbach 2024-02-13 10:05:27 +01:00
parent a57d24ad6a
commit 567130f634
No known key found for this signature in database
GPG key ID: C248C28D432560ED
2 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
src/server/utils.js
View file

@ -156,17 +156,17 @@ export function generateProfileTheme (/** @type {Profile} */ profile) {
const reEmailLike = /(<[^\s@<>]+@[^\s@<>]+>)/
export function escapedParam(name) {
export function escapedParam (/** @type {String} */ name) {
return param(name).customSanitizer(value => {
return value.split(reEmailLike).map(token => {
if (reEmailLike.test(token)) return token
return escape(token)
return escapeString(token)
}).join('')
})
}
// Copied from https://github.com/validatorjs/validator.js/blob/b958bd7d1026a434ad3bf90064d3dcb8b775f1a9/src/lib/escape.js
function escape(input) {
// Copied from https://github.com/validatorjs/validator.js/blob/b958bd7d1026a434ad3bf90064d3dcb8b775f1a9/src/lib/escapeString.js
function escapeString (/** @type {String} */ input) {
return (input.replace(/&/g, '&amp;')
.replace(/"/g, '&quot;')
.replace(/'/g, '&#x27;')