sanitize note title

This commit is contained in:
zadam
2022-07-05 22:40:41 +02:00
parent e7db262559
commit 4fc686bbbc
9 changed files with 21 additions and 13 deletions

View File

@@ -77,7 +77,9 @@ export default class EditedNotesWidget extends CollapsibleWidget {
);
}
else {
$item.append(editedNote.notePath ? await linkService.createNoteLink(editedNote.notePath.join("/"), {showNotePath: true}) : editedNote.title);
$item.append(editedNote.notePath
? await linkService.createNoteLink(editedNote.notePath.join("/"), {showNotePath: true})
: $("<span>").text(editedNote.title));
}
if (i < editedNotes.length - 1) {

View File

@@ -296,7 +296,8 @@ export default class EditableTextTypeWidget extends AbstractTextTypeWidget {
const note = await froca.getNote(noteId);
this.textEditor.model.change( writer => {
const src = `api/images/${note.noteId}/${note.title}`;
const sanitizedTitle = note.title.replace(/[^a-z0-9-.]/gi, "");
const src = `api/images/${note.noteId}/${sanitizedTitle}`;
const imageElement = writer.createElement( 'image', { 'src': src } );

View File

@@ -79,7 +79,7 @@ export default class EmptyTypeWidget extends TypeWidget {
this.$workspaceNotes.append(
$('<div class="workspace-note">')
.append($("<div>").addClass(workspaceNote.getIcon() + " workspace-icon"))
.append($("<div>").append(workspaceNote.title))
.append($("<div>").text(workspaceNote.title))
.attr("title", "Enter workspace " + workspaceNote.title)
.on('click', () => this.triggerCommand('hoistNote', {noteId: workspaceNote.noteId}))
);