@oinone/kunlun-vue-admin-base 6.4.11 → 6.4.12

package/dist/oinone-kunlun-vue-admin-base.esm.js

@@ -64790,6 +64790,18 @@ var script$2E = defineComponent({
          * 4. 排除URL前后的标点符号
          */
         const URL_REGEX = /\b(https?:\/\/|ftp:\/\/|sftp:\/\/)([^\s<>"]+)(\.[a-zA-Z0-9]{2,10})([^\s<>"]*)?\b/g;
+        const escapeHtml = (value) => {
+            return value
+                .replace(/&/g, '&amp;')
+                .replace(/</g, '&lt;')
+                .replace(/>/g, '&gt;')
+                .replace(/"/g, '&quot;')
+                .replace(/'/g, '&#039;');
+        };
+        const stringifyJsonText = (value) => {
+            var _a;
+            return escapeHtml((_a = JSON.stringify(value)) !== null && _a !== void 0 ? _a : String(value));
+        };
         /**
          * 将JSON对象解析为带语法高亮和链接的HTML行数据
          * @param obj 要解析的JSON对象
@@ -64804,13 +64816,21 @@ var script$2E = defineComponent({
              * @returns 处理后的HTML字符串
              */
             const replaceUrlWithLink = (str) => {
-                // 先通过JSON.stringify转义，再替换URL
-                const escapedStr = JSON.stringify(str).slice(1, -1); // 去掉首尾的引号
-                return escapedStr.replace(URL_REGEX, (match) => {
-                    // 对匹配到的URL进行转义，防止XSS
-                    const encodedUrl = encodeURI(match);
-                    return `<a href="${encodedUrl}" target="_blank" class="text-blue-500 underline hover:text-blue-700">${match}</a>`;
-                });
+                // 先通过JSON.stringify处理JSON转义，再对要注入v-html的文本做HTML转义。
+                const stringifiedStr = JSON.stringify(str).slice(1, -1);
+                let result = '';
+                let lastIndex = 0;
+                let matchResult;
+                URL_REGEX.lastIndex = 0;
+                matchResult = URL_REGEX.exec(stringifiedStr);
+                while (matchResult) {
+                    const url = matchResult[0];
+                    result += escapeHtml(stringifiedStr.slice(lastIndex, matchResult.index));
+                    result += `<a href="${escapeHtml(encodeURI(url))}" target="_blank" class="text-blue-500 underline hover:text-blue-700">${escapeHtml(url)}</a>`;
+                    lastIndex = matchResult.index + url.length;
+                    matchResult = URL_REGEX.exec(stringifiedStr);
+                }
+                return result + escapeHtml(stringifiedStr.slice(lastIndex));
             };
             if (Array.isArray(obj)) {
                 lines.push({
@@ -64834,7 +64854,7 @@ var script$2E = defineComponent({
                         }
                         else {
                             // 非字符串类型：直接JSON.stringify
-                            itemHtml = `<span class="text-green-600">${JSON.stringify(item)}</span>`;
+                            itemHtml = `<span class="text-green-600">${stringifyJsonText(item)}</span>`;
                         }
                         // 添加逗号
                         itemHtml += isLast ? '' : '<span class="text-gray-600">,</span>';
@@ -64874,11 +64894,11 @@ var script$2E = defineComponent({
                         // 处理嵌套对象/数组
                         lines.push({
                             indent: indent + 1,
-                            html: `<span class="text-blue-600">"${key}"</span><span class="text-gray-600">: </span>`,
+                            html: `<span class="text-blue-600">${stringifyJsonText(key)}</span><span class="text-gray-600">: </span>`,
                             collapsible: false
                         });
                         const childLines = parseJSON(value, indent + 1);
-                        childLines[0].html = `<span class="text-blue-600">"${key}"</span><span class="text-gray-600">: </span>${childLines[0].html}`;
+                        childLines[0].html = `<span class="text-blue-600">${stringifyJsonText(key)}</span><span class="text-gray-600">: </span>${childLines[0].html}`;
                         childLines[childLines.length - 1].html += isLast ? '' : '<span class="text-gray-600">,</span>';
                         lines.pop();
                         lines.push(...childLines);
@@ -64893,12 +64913,12 @@ var script$2E = defineComponent({
                         }
                         else {
                             // 非字符串类型：直接序列化
-                            valueHtml = JSON.stringify(value);
+                            valueHtml = stringifyJsonText(value);
                         }
                         // 拼接最终HTML
                         lines.push({
                             indent: indent + 1,
-                            html: `<span class="text-blue-600">"${key}"</span><span class="text-gray-600">: </span><span class="${valueColor}">${valueHtml}</span>${isLast ? '' : '<span class="text-gray-600">,</span>'}`,
+                            html: `<span class="text-blue-600">${stringifyJsonText(key)}</span><span class="text-gray-600">: </span><span class="${valueColor}">${valueHtml}</span>${isLast ? '' : '<span class="text-gray-600">,</span>'}`,
                             collapsible: false
                         });
                     }
@@ -64936,12 +64956,7 @@ var script$2E = defineComponent({
                 const isOpenTag = trimmed.startsWith('<') && !trimmed.startsWith('</') && !trimmed.endsWith('/>');
                 const regx = /<[^/]*?>/g;
                 const closeAble = regx.test(line);
-                const lineHtml = line
-                    .replace(/&/g, '&amp;')
-                    .replace(/</g, '&lt;')
-                    .replace(/>/g, '&gt;')
-                    .replace(/"/g, '&quot;')
-                    .replace(/'/g, '&#039;');
+                const lineHtml = escapeHtml(line);
                 lines.push({
                     indent,
                     html: `<pre>${lineHtml}</pre>`,
@@ -64957,7 +64972,7 @@ var script$2E = defineComponent({
             const lines = [];
             lines.push({
                 indent: 1,
-                html: `<span class="text-gray-600">${str}</span>`,
+                html: `<span class="text-gray-600">${escapeHtml(str)}</span>`,
                 collapsible: false
             });
             return lines;