test/amis2
1
0
Fork 0
mirror of https://gitee.com/baidu/amis.git synced 2024-11-30 02:58:05 +08:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

xss 问题修复

Browse Source
This commit is contained in:
2betop 2020-12-09 13:20:54 +08:00
parent eb939b0e3f
commit 66a1f910b0
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/renderers/IFrame.tsx
View File

@ -157,6 +157,13 @@ export default class IFrame extends React.Component<IFrameProps, object> {
...tempStyle,
...style
};
const finalSrc = src ? buildApi(src, data).url : undefined;
if (typeof finalSrc === 'string' && /javascript\:/.test(finalSrc)) {
return <p>请填写合法的 iframe 地址</p>;
}
return (
<iframe
className={className}
@ -164,7 +171,7 @@ export default class IFrame extends React.Component<IFrameProps, object> {
style={style}
ref={this.IFrameRef}
onLoad={this.onLoad}
src={src ? buildApi(src, data).url : undefined}
src={finalSrc}
/>
);
}