feat: 编译时防范 XSS 攻击

This commit is contained in:
Frankie Huang 2025-05-02 16:38:23 +08:00
parent bb7f6e2772
commit 093f918dad

View File

@ -50,7 +50,7 @@ import '@vavt/v3-extension/lib/asset/PreviewThemeSwitch.css';
import '@vavt/v3-extension/lib/asset/ExportPDF.css'; import '@vavt/v3-extension/lib/asset/ExportPDF.css';
import UploadImageConfig from './UI/UploadImageConfig.vue'; import UploadImageConfig from './UI/UploadImageConfig.vue';
import scriptjs from 'scriptjs' import scriptjs from 'scriptjs'
import { config, MdEditor, MdCatalog, NormalToolbar } from 'md-editor-v3'; import { config, MdEditor, MdCatalog, NormalToolbar, XSSPlugin } from 'md-editor-v3';
import { ThemeSwitch, PreviewThemeSwitch, ExportPDF } from '@vavt/v3-extension'; import { ThemeSwitch, PreviewThemeSwitch, ExportPDF } from '@vavt/v3-extension';
import { lineNumbers } from '@codemirror/view'; import { lineNumbers } from '@codemirror/view';
import { ref, reactive, watch, nextTick, onMounted } from "vue"; import { ref, reactive, watch, nextTick, onMounted } from "vue";
@ -171,6 +171,16 @@ config({
// //
return [...extensions, lineNumbers()]; return [...extensions, lineNumbers()];
}, },
markdownItPlugins(plugins) {
return [
...plugins,
{
type: 'xss',
plugin: XSSPlugin,
options: {},
},
];
},
}); });
const toggleLeftSideBar = () => { const toggleLeftSideBar = () => {