lzstealth/pulse-signage
1
0 Fork 0
Code Issues Pull Requests Actions Packages Activity

Fix managed fonts and quoted styles in slide previews
Publish Docker Image / build-and-push-existing-registry (./build/Dockerfile, web, pulse-signage-web) (push) Successful in 1m20s
Details
Publish Docker Image / build-and-push-existing-registry (./build/Dockerfile.player, player, pulse-signage-player) (push) Successful in 35s
Details

Browse Source
This commit is contained in:
lzstealth committed 2026-10-26 01:52:55 +00:00
1 parent 5b5af1a7b9
commit ccd3535e7c
4 files changed
+61 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/web/public/js/regions/region-utils.js
+8 -2
View File
@@ -14,6 +14,12 @@
.replace(/'/g, ''');
}
function decodeAttributeValue(value) {
var decoder = document.createElement('textarea');
decoder.innerHTML = String(value || '').replace(/</g, '&lt;');
return decoder.value;
}
function sanitizePreviewHtml(html) {
var output = String(html || '');
output = output.replace(/<script[\s\S]*?<\/script>/gi, '');
@@ -123,7 +129,7 @@
return '';
}
var value = doubleQuoted !== undefined ? doubleQuoted : singleQuoted !== undefined ? singleQuoted : bareValue !== undefined ? bareValue : '';
var value = decodeAttributeValue(doubleQuoted !== undefined ? doubleQuoted : singleQuoted !== undefined ? singleQuoted : bareValue !== undefined ? bareValue : '');
if (lowerKey === 'href' && /^(?:\s*javascript:|\s*data:)/i.test(String(value || ''))) {
return '';
}
@@ -185,7 +191,7 @@
return '';
}
var value = doubleQuoted !== undefined ? doubleQuoted : singleQuoted !== undefined ? singleQuoted : bareValue !== undefined ? bareValue : '';
var value = decodeAttributeValue(doubleQuoted !== undefined ? doubleQuoted : singleQuoted !== undefined ? singleQuoted : bareValue !== undefined ? bareValue : '');
if (lowerKey === 'href' && /^(?:\s*javascript:|\s*data:)/i.test(String(value || ''))) {
return '';
}
src/web/routes/register.js
+1
View File
@@ -102,6 +102,7 @@ function registerAuthAndAccountRoutes(app, deps) {
pool: deps.pool,
common: deps.common,
pages: deps.pages,
mediaDir: deps.mediaDir,
requirePermission: deps.requirePermission,
buildDashboardState: deps.buildDashboardState,
fetchScreensByPlaylistId: deps.fetchScreensByPlaylistId,