diff options
| -rw-r--r-- | public/js/getrepo.js | 6 | ||||
| -rw-r--r-- | public/js/main.js | 3 | ||||
| -rw-r--r-- | src/js/getrepo.js | 12 | ||||
| -rw-r--r-- | src/js/main.js | 8 |
4 files changed, 20 insertions, 9 deletions
diff --git a/public/js/getrepo.js b/public/js/getrepo.js index b78eb30a..93a9c45a 100644 --- a/public/js/getrepo.js +++ b/public/js/getrepo.js @@ -91,15 +91,15 @@ var displayRepos = function displayRepos(repos) { var forksUrl = "".concat(userHome, "/").concat(repo.name, "/network/members"); var listItem = document.createElement('li'); listItem.classList.add('repo', 'animate', 'zoomIn'); - listItem.innerHTML = "\n\t\t\t<h2 class=\"repo-title\">".concat(repo.name, "</h2>\n\t\t\t<span class=\"rdescription\">").concat(repo.description ? "<span class=\"rdescriptiontext\">".concat(repo.description, "</span>") : '', "<br/><br/>"); + listItem.innerHTML = escapeTextReinterpreted("\n\t\t\t<h2 class=\"repo-title\">".concat(repo.name, "</h2>\n\t\t\t<span class=\"rdescription\">").concat(repo.description ? "<span class=\"rdescriptiontext\">".concat(repo.description, "</span>") : '', "<br/><br/>")); if (repo.stargazers_count > 0) { - listItem.innerHTML += "<a href=\"".concat(starsUrl, "\">\n\t\t\t<span>\u2B50 ").concat(repo.stargazers_count, "</span></a>"); + listItem.innerHTML += escapeTextReinterpreted("<a href=\"".concat(starsUrl, "\">\n\t\t\t<span>\u2B50 ").concat(repo.stargazers_count, "</span></a>")); } if (repo.language) { listItem.innerHTML += "<a href=\"".concat(langUrl, "\">\n\t\t\t<span>").concat(devicons[repo.language], "</span></a>"); } if (repo.forks_count > 0) { - listItem.innerHTML += "<a href=\"".concat(starsUrl, "\">\n\t\t\t<span>").concat(devicons["Git"], " ").concat(repo.forks_count, "</span></a>"); + listItem.innerHTML += escapeTextReinterpreted("<a href=\"".concat(starsUrl, "\">\n\t\t\t<span>").concat(devicons["Git"], " ").concat(repo.forks_count, "</span></a>")); } if (repo.homepage && repo.homepage !== "") { listItem.innerHTML += "<br /> <br />\n\t\t\t<a class=\"link-btn btn-code\" href=".concat(repo.html_url, ">Code ").concat(devicons["Github"], "</a>\n\t\t\t<a class=\"link-btn btn-live\" href=").concat(repo.homepage, ">Live ").concat(devicons["Chrome"], "</a> <br />"); diff --git a/public/js/main.js b/public/js/main.js index e7a44b6a..323dae9e 100644 --- a/public/js/main.js +++ b/public/js/main.js @@ -6,4 +6,7 @@ if ('serviceWorker' in navigator) { console.log('sw.js failed: ', err); }); }); +} +function escapeTextReinterpreted(htmlStr) { + return htmlStr.replace(/&/g, "&").replace(/</g, "<").replace(/>/g, ">").replace(/"/g, """).replace(/'/g, "'"); }
\ No newline at end of file diff --git a/src/js/getrepo.js b/src/js/getrepo.js index 675a187c..c7d1a70e 100644 --- a/src/js/getrepo.js +++ b/src/js/getrepo.js @@ -72,13 +72,13 @@ const displayRepos = (repos) => { let listItem = document.createElement('li'); listItem.classList.add('repo', 'animate', 'zoomIn') - listItem.innerHTML = ` + listItem.innerHTML = escapeTextReinterpreted(` <h2 class="repo-title">${repo.name}</h2> - <span class="rdescription">${repo.description ? `<span class="rdescriptiontext">${repo.description}</span>` : ''}<br/><br/>` + <span class="rdescription">${repo.description ? `<span class="rdescriptiontext">${repo.description}</span>` : ''}<br/><br/>`) if (repo.stargazers_count > 0) { - listItem.innerHTML += `<a href="${starsUrl}"> - <span>⭐ ${repo.stargazers_count}</span></a>` + listItem.innerHTML += escapeTextReinterpreted(`<a href="${starsUrl}"> + <span>⭐ ${repo.stargazers_count}</span></a>`) } if (repo.language) { @@ -87,8 +87,8 @@ const displayRepos = (repos) => { } if (repo.forks_count > 0) { - listItem.innerHTML += `<a href="${starsUrl}"> - <span>${devicons["Git"]} ${repo.forks_count}</span></a>` + listItem.innerHTML += escapeTextReinterpreted(`<a href="${starsUrl}"> + <span>${devicons["Git"]} ${repo.forks_count}</span></a>`) } if (repo.homepage && repo.homepage !== "") { diff --git a/src/js/main.js b/src/js/main.js index 1276c46c..88162510 100644 --- a/src/js/main.js +++ b/src/js/main.js @@ -7,4 +7,12 @@ if ('serviceWorker' in navigator) { console.log('sw.js failed: ', err); }); }); +} + +function escapeTextReinterpreted(htmlStr) { + return htmlStr.replace(/&/g, "&") + .replace(/</g, "<") + .replace(/>/g, ">") + .replace(/"/g, """) + .replace(/'/g, "'"); }
\ No newline at end of file |