pkp/pkp-lib#9717 Use v-strip-unsafe-html instead of v-html

blesildaramirez · Feb 21, 2025 · 40f9aeb · 40f9aeb
1 parent ab5ee00
commit 40f9aeb
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/plugins/importexport/native/templates/index.tpl b/plugins/importexport/native/templates/index.tpl
@@ -87,7 +87,7 @@
 								/>
 								<span
                                     class="listPanel__itemSubTitle"
-                                    v-html="localize(
+                                    v-strip-unsafe-html="localize(
                                         item.publications.find(p => p.id == item.currentPublicationId).fullTitle,
                                         item.publications.find(p => p.id == item.currentPublicationId).locale
                                     )"

diff --git a/plugins/importexport/onix30/templates/index.tpl b/plugins/importexport/onix30/templates/index.tpl
@@ -59,7 +59,7 @@
 											/>
 											<span 
                                                 class="listPanel__itemSubTitle"
-                                                v-html="localize(
+                                                v-strip-unsafe-html="localize(
                                                             item.publications.find(p => p.id == item.currentPublicationId).fullTitle,
                                                             item.publications.find(p => p.id == item.currentPublicationId).locale
                                                         )"

diff --git a/plugins/pubIds/urn/js/FieldTextUrn.js b/plugins/pubIds/urn/js/FieldTextUrn.js
@@ -27,7 +27,7 @@ pkp.registry.registerComponent('FieldTextUrn', {
 		'			<div' +
 		'				v-if="isPrimaryLocale && description"' +
 		'				class="pkpFormField__description"' +
-		'				v-html="description"' +
+		'				v-strip-unsafe-html="description"' +
 		'				:id="describedByDescriptionId"' +
 		'			/>' +
 		'			<div class="pkpFormField__control" :class="controlClasses">' +