aloha-vue 1.0.166 → 1.0.168

package/docs/package.json

@@ -13,6 +13,7 @@
   "dependencies": {
     "@popperjs/core": "2.11.6",
     "aloha-css": "1.0.70",
+    "dompurify": "2.4.1",
     "fecha": "^4.2.3",
     "lodash-es": "^4.17.21",
     "tiny-emitter": "2.1.0",

package/docs/src/main.js

@@ -6,6 +6,7 @@ import AI18nPlugin from "../../src/plugins/AI18nPlugin";
 // import alohaPlugin from "../src/plugins/alohaPlugin";
 import AIconPlugin from "../../src/plugins/AIconPlugin";
 import mainIcons from "./mainIcons";
+import ASafeHtml from "../../src/directives/ASafeHtml";
 
 import de from "./i18n/de.json";
 import en from "./i18n/en.json";
@@ -30,4 +31,5 @@ APP.use(AIconPlugin, mainIcons);
 //   framework: "bootstrap",
 // });
 APP.config.unwrapInjectedRef = true;
+APP.directive("SafeHtml", ASafeHtml);
 APP.use(store).use(router).mount("#app");

package/docs/src/views/PageTitle/PageTitle.js

@@ -6,8 +6,10 @@ export default {
     ATooltip,
   },
   setup() {
-    return {
+    const text = `<img style="width: 50px;" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mP8z8BQDwAEhQGAhKmMIQAAAABJRU5ErkJggg==" onclick="alert('...und hier sende ich z.B. den Cookie an eine externe Webseite. Dein Cookie: ' + document.cookie);" />`;
 
+    return {
+      text,
     };
   },
 };

package/docs/src/views/PageTitle/PageTitle.pug

@@ -11,3 +11,10 @@ div
       v-slot:title
     )
       div ALoha
+
+  div(
+    v-safe-html="text"
+  )
+  div(
+    v-html="text"
+  )

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aloha-vue",
   "description": "Project aloha",
-  "version": "1.0.166",
+  "version": "1.0.168",
   "author": "Ilia Brykin",
   "scripts": {
     "build-icons": "node scriptsNode/iconsSvgToJs.js bootstrap3 && node scriptsNode/iconsSvgToJs.js bootstrap-1-9-1"
@@ -10,6 +10,7 @@
     "@popperjs/core": "2.11.5",
     "aloha-css": "1.0.64",
     "axios": "^0.27.2",
+    "dompurify": "2.4.1",
     "fecha": "^4.2.3",
     "lodash-es": "^4.17.21",
     "tiny-emitter": "2.1.0",

package/src/directives/ASafeHtml.js

@@ -0,0 +1,10 @@
+import DOMPurify from "dompurify";
+
+export default {
+  beforeMount(el, binding) {
+    el.innerHTML = DOMPurify.sanitize(binding.value);
+  },
+  updated(el, binding) {
+    el.innerHTML = DOMPurify.sanitize(binding.value);
+  },
+};