Skip to content

Commit 58efaa0

Browse files
fix 2 XSS vulns (#342)
1 parent f17d7fe commit 58efaa0

File tree

2 files changed

+2
-9
lines changed

2 files changed

+2
-9
lines changed

src/components/containers/Fold.js

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -96,10 +96,7 @@ class Fold extends Component {
9696
<div className="fold__top__arrow-title">
9797
{arrowIcon}
9898
{icon}
99-
<div
100-
className="fold__top__title"
101-
dangerouslySetInnerHTML={{__html: name}}
102-
/>
99+
<div className="fold__top__title">{name}</div>
103100
</div>
104101
{deleteButton(deleteContainer)}
105102
</div>

src/components/widgets/text_editors/RichText/LinkDecorator.js

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,20 +8,16 @@
88

99
import React from 'react';
1010
import PropTypes from 'prop-types';
11-
import {Entity} from 'draft-js';
1211

1312
const LinkDecorator = props => {
14-
const {url} = Entity.get(props.entityKey).getData();
15-
1613
return (
17-
<a href={url} style={props.style}>
14+
<a href="#" style={props.style}>
1815
{props.children}
1916
</a>
2017
);
2118
};
2219

2320
LinkDecorator.propTypes = {
24-
entityKey: PropTypes.string.isRequired,
2521
style: PropTypes.object.isRequired,
2622
children: PropTypes.oneOfType([PropTypes.array, PropTypes.element])
2723
.isRequired,

0 commit comments

Comments
 (0)