-
Notifications
You must be signed in to change notification settings - Fork 266
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: apostrophe issue #10614
fix: apostrophe issue #10614
Conversation
src/components/NoMessageSelected.vue
Outdated
@@ -37,7 +37,7 @@ export default { | |||
|
|||
computed: { | |||
welcomeMessage() { | |||
return t('mail', 'Welcome to {cloudName} Mail', { cloudName: window?.OC?.theme?.name ?? 'Nextcloud' }) | |||
return t('mail', 'Welcome to {cloudName} Mail', { cloudName: window?.OC?.theme?.name ?? 'Nextcloud' }, null, {escape: false}) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
mail/src/components/NoMessageSelected.vue
Lines 13 to 15 in ae4502a
<h1 class="empty-content__name"> | |
{{ welcomeMessage }} | |
</h1> |
welcomeMessage
into the DOM as-is. Doesn't that open the door for code injection?Is
window?.OC?.theme?.name
HTML encoded already?!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
window?.OC?.theme?.name is not HTML encoded, the encoding happens in the translation function.
Made changes, what do you think?
Signed-off-by: SebastianKrupinski <[email protected]>
3ad4681
to
032a0bf
Compare
/backport to stable4.2 |
/backport to stable3.7 |
/backport to stable4.1 |
Fix #10534
Fixes and issue with apostrophes in system name