lzstealth/pulse-signage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Activity

Release 2.7.3
Publish Docker Image / build-and-push (./build/Dockerfile, git.lzstealth.com/lzstealth/pulse-signage-web, web) (push) Successful in 1m15s
Details
Publish Docker Image / build-and-push (./build/Dockerfile.player, git.lzstealth.com/lzstealth/pulse-signage-player, player) (push) Successful in 32s
Details

Browse Source
This commit is contained in:
lzstealth
2026-08-15 11:43:07 +01:00
parent 15dc6eb7f2
commit f0177e6628
25 changed files with 871 additions and 127 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/player/public/js/player-page-rendering.js
+9 -1
View File
@@ -4,6 +4,14 @@ function sanitizeFontFamily(value) {
return String(value || '').replace(/[^a-zA-Z0-9 ,\"-]/g, '').trim();
}
function normalizeStyleAttributeValue(value) {
return String(value || '')
.replace(/"/g, '"')
.replace(/'/g, "'")
.replace(/"/g, '"')
.replace(/'/g, "'");
}
// Clamp font size to the supported range.
function sanitizeFontSize(value) {
return Math.max(8, Number(value || 0) || 24);
@@ -401,7 +409,7 @@ function sanitizeRichTextAttributes(tagName, attrText) {
return '';
}
}
attrs.push(' ' + lowerKey + '="' + escapeHtml(value) + '"');
attrs.push(' ' + lowerKey + '="' + escapeHtml(lowerKey === 'style' ? normalizeStyleAttributeValue(value) : value) + '"');
return '';
});
src/player/render-helpers.js
+9 -1
View File
@@ -25,6 +25,14 @@ function escapeHtml(value) {
.replace(/'/g, ''');
}
function normalizeStyleAttributeValue(value) {
return String(value || '')
.replace(/"/g, '"')
.replace(/'/g, "'")
.replace(/"/g, '"')
.replace(/'/g, "'");
}
function sanitizeFontFamily(value) {
return String(value || '').replace(/[^a-zA-Z0-9 ,"-]/g, '').trim();
}
@@ -106,7 +114,7 @@ function sanitizeRichTextAttributes(tagName, attrText) {
return '';
}
}
attrs.push(' ' + lowerKey + '="' + escapeHtml(value) + '"');
attrs.push(' ' + lowerKey + '="' + escapeHtml(lowerKey === 'style' ? normalizeStyleAttributeValue(value) : value) + '"');
return '';
});