Update DOM Functions to use unescapeEntities #104

New issue

Closed

opened 2025-04-12 04:16:14 -04:00 by rainbownapkin · 4 comments

rainbownapkin commented

2025-04-12 04:16:14 -04:00

(Migrated from gitlab.com)

Update all DOM functions which inject text into elements to use the unescapeEntities() function into the textContent property.

This allows content which has been sanatized server-side to display properly, while also ensuring any content which somehow makes it through unsanitized is still handled safely.

Update all DOM functions which inject text into elements to use the unescapeEntities() function into the textContent property. This allows content which has been sanatized server-side to display properly, while also ensuring any content which somehow makes it through unsanitized is still handled safely.

rainbownapkin commented

2025-04-12 04:16:14 -04:00

(Migrated from gitlab.com)

added #101 as parent issue

rainbownapkin commented

2025-04-12 04:18:18 -04:00

(Migrated from gitlab.com)

changed title from Update DOM Functions to use unescapeEntries to Update DOM Functions to use unescapeEntities

<div>changed title from <code class="idiff">Update DOM Functions to use unescapeEnt<span class="idiff left right deletion">r</span>ies</code> to <code class="idiff">Update DOM Functions to use unescapeEnt<span class="idiff left right addition">it</span>ies</code></div>

rainbownapkin commented

2025-04-12 04:18:18 -04:00

(Migrated from gitlab.com)

changed the description

rainbownapkin (Migrated from gitlab.com) closed this issue

2025-04-12 07:22:26 -04:00

rainbownapkin commented

2025-04-12 07:22:27 -04:00

(Migrated from gitlab.com)

Updated client-side DOM manipulation functions to unescape char-codes before injecting them via innerText instead of raw-dogging it into innerHTML: 4ed4b572f2

Updated client-side DOM manipulation functions to unescape char-codes before injecting them via innerText instead of raw-dogging it into innerHTML: 4ed4b572f2db1b001ee6d15f2e607b44cfa975b9