chore: Sanitize html content (#4498)

2022-04-21 11:27:28 +05:30
parent 2c73df4292
commit 27ddd77a1b
28 changed files with 52 additions and 29 deletions
--- a/app/javascript/widget/components/AgentMessageBubble.vue
+++ b/app/javascript/widget/components/AgentMessageBubble.vue
@@ -8,9 +8,9 @@
      :class="$dm('bg-white', 'dark:bg-slate-700')"
    >
      <div
+        v-dompurify-html="formatMessage(message, false)"
        class="message-content"
        :class="$dm('text-black-900', 'dark:text-slate-50')"
-        v-html="formatMessage(message, false)"
      ></div>
      <email-input
        v-if="isTemplateEmail"