admin/raven
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Browse Source
This commit is contained in:
John Cardinal
2020-09-14 19:23:56 +00:00
parent ec55e3b6bb
commit 0f00713a9e
3 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
server/AyaNova/biz/ReportBiz.cs
View File

@@ -382,6 +382,9 @@ namespace AyaNova.Biz
//add Marked for markdown processing //add Marked for markdown processing
await page.AddScriptTagAsync(new AddTagOptions() { Path = Path.Combine(ReportJSFolderPath, "ay-md.js") }); await page.AddScriptTagAsync(new AddTagOptions() { Path = Path.Combine(ReportJSFolderPath, "ay-md.js") });
//add DOM Purify for markdown template sanitization processing
await page.AddScriptTagAsync(new AddTagOptions() { Path = Path.Combine(ReportJSFolderPath, "ay-pf.js") });
//add stock helpers //add stock helpers
await page.AddScriptTagAsync(new AddTagOptions() { Path = Path.Combine(ReportJSFolderPath, "ay-report.js") }); await page.AddScriptTagAsync(new AddTagOptions() { Path = Path.Combine(ReportJSFolderPath, "ay-report.js") });

3
server/AyaNova/resource/rpt/ay-pf.js Normal file
View File

File diff suppressed because one or more lines are too long

4
server/AyaNova/resource/rpt/ay-report.js
View File

@@ -37,8 +37,8 @@ function ayRegisterHelpers() {
return currencyLocalized(value); return currencyLocalized(value);
}); });
Handlebars.registerHelper("ayMarkdown", function (astring) { Handlebars.registerHelper("ayWiki", function (astring) {
return marked(astring, { breaks: true }); return new Handlebars.SafeString(DOMPurify.sanitize(marked(astring, { breaks: true })));
}); });
Handlebars.registerHelper("ayJSON", function (obj) { Handlebars.registerHelper("ayJSON", function (obj) {