From 079453e0d84b4d7a515c5371b2a2f88e9934b09a Mon Sep 17 00:00:00 2001
From: John Cardinal <support@ayanova.com>
Date: Thu, 16 Apr 2020 15:50:27 +0000
Subject: [PATCH]

---
 ayanova/package-lock.json               |  5 +++++
 ayanova/package.json                    |  1 +
 ayanova/src/components/wiki-control.vue | 13 ++++++-------
 3 files changed, 12 insertions(+), 7 deletions(-)

diff --git a/ayanova/package-lock.json b/ayanova/package-lock.json
index 03a58b75..4cea66d9 100644
--- a/ayanova/package-lock.json
+++ b/ayanova/package-lock.json
@@ -9695,6 +9695,11 @@
         "domelementtype": "1"
       }
     },
+    "dompurify": {
+      "version": "2.0.8",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.0.8.tgz",
+      "integrity": "sha512-vIOSyOXkMx81ghEalh4MLBtDHMx1bhKlaqHDMqM2yeitJ996SLOk5mGdDpI9ifJAgokred8Rmu219fX4OltqXw=="
+    },
     "domutils": {
       "version": "1.7.0",
       "resolved": "https://registry.npmjs.org/domutils/-/domutils-1.7.0.tgz",
diff --git a/ayanova/package.json b/ayanova/package.json
index 35d2628c..435e5a79 100644
--- a/ayanova/package.json
+++ b/ayanova/package.json
@@ -13,6 +13,7 @@
   },
   "dependencies": {
     "core-js": "^3.6.4",
+    "dompurify": "^2.0.8",
     "jwt-decode": "^2.2.0",
     "luxon": "^1.22.2",
     "marked": "^0.8.2",
diff --git a/ayanova/src/components/wiki-control.vue b/ayanova/src/components/wiki-control.vue
index e2ad7cac..e03d8513 100644
--- a/ayanova/src/components/wiki-control.vue
+++ b/ayanova/src/components/wiki-control.vue
@@ -3,17 +3,13 @@
     <span class="v-label v-label--active theme--light">
       {{ $ay.t("WikiPage") }}
     </span>
-    <v-sheet
-      elevation="1"
-      color="grey lighten-5"
-      v-html="compiledOutput()"
-      class="pa-2 pa-sm-6"
-    >
+    <v-sheet elevation="2" v-html="compiledOutput()" class="pa-2 pa-sm-6">
     </v-sheet>
   </div>
 </template>
 <script>
 import marked from "marked";
+import DOMPurify from "dompurify";
 export default {
   data: () => ({}),
   props: {
@@ -22,7 +18,7 @@ export default {
   methods: {
     compiledOutput() {
       //return marked(this.content, { sanitize: true });
-      return marked(this.value);
+      return DOMPurify.sanitize(marked(this.value));
     }
   }
 };
@@ -35,5 +31,8 @@ remove extra spacing on sides in xs mode (gutters maybe on column or row?)
 Show/hide/edit control
 eyeball icon like password reveal
 
+baseurl setting for local images:
+https://marked.js.org/#/USING_ADVANCED.md#options
+
  */
 </script>