luulam/AFFiNE
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

fix(figma): Incomplete URL substring sanitization

Browse Source
This commit is contained in:
tzhangchi
2022-08-17 10:37:04 +08:00
parent fd9ed2862f
commit 2f17534394
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
libs/components/editor-blocks/src/blocks/figma/index.ts
View File

@@ -1,9 +1,9 @@
import { Protocol } from '@toeverything/datasource/db-service';
import { import {
AsyncBlock, AsyncBlock,
BaseView, BaseView,
SelectBlock, SelectBlock,
} from '@toeverything/framework/virgo'; } from '@toeverything/framework/virgo';
import { Protocol, services } from '@toeverything/datasource/db-service';
import { FigmaView } from './FigmaView'; import { FigmaView } from './FigmaView';
export class FigmaBlock extends BaseView { export class FigmaBlock extends BaseView {
@@ -19,7 +19,10 @@ export class FigmaBlock extends BaseView {
const tag_name = el.tagName; const tag_name = el.tagName;
if (tag_name === 'A' && el.parentElement?.childElementCount === 1) { if (tag_name === 'A' && el.parentElement?.childElementCount === 1) {
const href = el.getAttribute('href'); const href = el.getAttribute('href');
if (href.indexOf('.figma.com') !== -1) { const allowedHosts = ['www.figma.com'];
const host = new URL(href).host;
if (allowedHosts.includes(host)) {
return [ return [
{ {
type: this.type, type: this.type,