searchengines-web/MeiliSearch
searchengines-web/MeiliSearch
1
0
Fork 0
mirror of https://github.com/meilisearch/MeiliSearch synced 2024-06-30 00:02:57 +02:00
Code Issues Releases Wiki Activity

Merge pull request #539 from emresaglam/html-sanitize

Browse Source 
html sanitize
This commit is contained in:
Clément Renault 2020-03-25 21:33:03 +01:00 committed by GitHub
commit ba8a410d4c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
meilisearch-http/public/interface.html
View File

@ -147,6 +147,16 @@
</body> </body>
<script> <script>
function sanitizeHTMLEntities(str) {
if (str && typeof str === 'string') {
str = str.replace(/</g,"&lt;");
str = str.replace(/>/g,"&gt;");
str = str.replace(/&lt;em&gt;/g,"<em>");
str = str.replace(/&lt;\/em&gt;/g,"<\/em>");
}
return str;
}
function httpGet(theUrl) { function httpGet(theUrl) {
var xmlHttp = new XMLHttpRequest(); var xmlHttp = new XMLHttpRequest();
xmlHttp.open("GET", theUrl, false); // false for synchronous request xmlHttp.open("GET", theUrl, false); // false for synchronous request
@ -169,7 +179,8 @@
lastRequest.open("GET", theUrl, true); lastRequest.open("GET", theUrl, true);
lastRequest.onload = function (e) { lastRequest.onload = function (e) {
if (lastRequest.readyState === 4 && lastRequest.status === 200) { if (lastRequest.readyState === 4 && lastRequest.status === 200) {
let httpResults = JSON.parse(lastRequest.responseText); let sanitizedResponseText = sanitizeHTMLEntities(lastRequest.responseText);
let httpResults = JSON.parse(sanitizedResponseText);
results.innerHTML = ''; results.innerHTML = '';
let processingTimeMs = httpResults.processingTimeMs; let processingTimeMs = httpResults.processingTimeMs;