cnhis-design-vue 2.0.2 → 2.0.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cnhis-design-vue",
-  "version": "2.0.2",
+  "version": "2.0.3",
   "description": "前端业务UI库",
   "keyword": "cnhis-design-vue vue cnhis",
   "homepage": "http://dv.cnhis.com/",
@@ -52,6 +52,7 @@
     "vue-infinite-scroll": "^2.0.2",
     "vue-resize-directive": "^1.2.0",
     "vue-simple-uploader": "^0.7.6",
+    "vue-xss": "^1.0.4",
     "vuedraggable": "^2.24.3",
     "vxe-table": "^3.4.1",
     "vxe-table-plugin-antd": "^1.11.3",

package/packages/big-table/index.js

@@ -1,11 +1,13 @@
 // 导入组件
 import BigTable from './src/BigTable.vue';
 import Fieldset from './src/Fieldset.vue';
+import VueXss from "vue-xss";
 
 // 为组件提供 install 安装方法，供按需引入
 BigTable.install = function(Vue) {
   Vue.component(BigTable.name, BigTable);
   Vue.component(Fieldset.name, Fieldset);
+  Vue.use(VueXss);
 };
 
 Object.assign(BigTable, {

package/packages/big-table/src/BigTable.vue

@@ -375,7 +375,17 @@ export default create({
       this.loadColumn(config);
     },
     data(value) {
-      this.loadData(value);
+      const list = value.map(v => {
+        const newV = {};
+        for (let i in v) {
+          newV[i] = JSON.parse(JSON.stringify(v[i] || ""));
+          if (newV[i] && typeof v[i] === "string") {
+            newV[i] = this.$xss(v[i]);
+          }
+        }
+        return newV;
+      });
+      this.loadData(list);
     },
     quickSearchConfig: {
       handler: function() {

package/packages/editor/index.js

@@ -1,9 +1,11 @@
 // 导入组件
 import Editor from './src/Editor.vue';
+import VueXss from "vue-xss";
 
 // 为组件提供 install 安装方法，供按需引入
 Editor.install = function(Vue) {
   Vue.component(Editor.name, Editor);
+  Vue.use(VueXss);
 };
 
 // 默认导出组件

package/packages/editor/src/Editor.vue

@@ -126,7 +126,7 @@ export default create({
       this.$emit('input', res);
     },
     setContent(content) {
-      this.editor.txt.html(content);
+      this.editor.txt.html((content && this.$xss(content)) || '');
     },
     appendContent(content) {
       this.editor.txt.append(content);

package/packages/multi-chat/chat/chatHistory.vue

@@ -21,7 +21,7 @@
                 <span class="right-time">
                   {{ formatDate(item.createdTime || item.sendTime, true) }}
                 </span>
-                <p class="content" v-html="item.content.content"></p>
+                <p class="content" v-html="$xss(item.content.content)"></p>
               </div>
               <div v-else-if="item.content.type === 1" style="margin-bottom: 20px;" class="upload-image content-wrap">
                 <span class="right-time">

package/packages/multi-chat/chat/chatMain.vue

@@ -93,7 +93,7 @@
                       'has-intention': item.intentionList && item.intentionList.length
                     }"
                   >
-                    <p v-html="item.content.content"></p>
+                    <p v-html="$xss(item.content.content)"></p>
                     <template v-if="item.content.attachments && item.content.attachments.length > 0">
                       <div v-for="(v, index) in item.content.attachments" :key="index" class="robot-item">
                         <a v-if="v.type == 1" :href="v.url" target="_blank"> {{ v.desc }}(超链) </a>

package/packages/multi-chat/chat/messageRecord.vue

@@ -26,7 +26,7 @@
                 <span class="name">{{ getName(item) }}</span>
                 <span class="time">{{ formatDate(item.sendTime || item.createdTime, true) }}</span>
               </div>
-              <div class="content" v-if="item.content.type === 0" v-html="item.content.content"></div>
+              <div class="content" v-if="item.content.type === 0" v-html="$xss(item.content.content)"></div>
               <MsgPicture v-if="item.content.type === 1" :image="item.content.content" style="width:160px;" @click="show(item.content.content)" />
               <template v-else-if="item.content.type === 4">
                 <div v-if="isSystemMsg(item)" class="system-msg">

package/packages/multi-chat/chat/mixins/base.js

@@ -1,5 +1,7 @@
 import ChatStore from '../../store';
 import { mapMutations } from '../../store/helper';
+import VueXss from "vue-xss";
+import Vue from 'vue'
 
 export default {
   provide() {
@@ -12,6 +14,9 @@ export default {
       i18nText: this.i18nText
     };
   },
+  beforeCreate() {
+    !this.$xss && Vue.use(VueXss);
+  },
   props: {
     getI18nText: {
       type: Function

package/packages/multi-chat/chat/scrollList.vue

@@ -951,7 +951,7 @@ export default {
           </div>
           <div class="chat-scroll-session__remark">{item.remarkSetting}</div>
           <div class="chat-scroll-session__brief-count">
-            <div class="chat-scroll-session__brief" domPropsInnerHTML={item.contentSetting}></div>
+            <div class="chat-scroll-session__brief" domPropsInnerHTML={this.$xss(item.contentSetting)}></div>
             {msgCount ? <span class="chat-scroll-session__count">{msgCount > 99 ? <a-tooltip title={msgCount}>99+</a-tooltip> : formatCount(item)}</span> : null}
             {statusSetting ? <span class="chat-scroll-session__level" domPropsInnerHTML={statusSetting}></span> : null}
           </div>

package/packages/multi-chat/setting/sessionList/messageRecord.vue

@@ -17,7 +17,7 @@
                 {{ formatDate(item.sendTime || item.createdTime, true) }}
               </span>
             </div>
-            <div class="content" v-if="item.content.type === 0" v-html="item.content.content"></div>
+            <div class="content" v-if="item.content.type === 0" v-html="$xss(item.content.content)"></div>
             <MsgPicture v-if="item.content.type === 1" :image="item.content.content" style="width:160px;" @click="show(item.content.content)" />
             <p class="content" v-else-if="item.content.type === 2">
               <img style="width:16px;" src="../../img/video_consult.png" />