mirror of
https://github.com/Tyrrrz/DiscordChatExporter.git
synced 2026-06-08 08:33:06 +00:00
Implement missing HTML encoding for several attribute injections (#1544)
This commit is contained in:
@@ -162,7 +162,7 @@ internal partial class HtmlMarkdownVisitor(
|
||||
)
|
||||
{
|
||||
var highlightClass = !string.IsNullOrWhiteSpace(multiLineCodeBlock.Language)
|
||||
? $"language-{multiLineCodeBlock.Language}"
|
||||
? $"language-{HtmlEncode(multiLineCodeBlock.Language)}"
|
||||
: "nohighlight";
|
||||
|
||||
buffer.Append(
|
||||
@@ -217,9 +217,11 @@ internal partial class HtmlMarkdownVisitor(
|
||||
<img
|
||||
loading="lazy"
|
||||
class="chatlog__emoji {jumboClass}"
|
||||
alt="{emoji.Name}"
|
||||
title="{emoji.Code}"
|
||||
src="{await context.ResolveAssetUrlAsync(emoji.ImageUrl, cancellationToken)}">
|
||||
alt="{HtmlEncode(emoji.Name)}"
|
||||
title="{HtmlEncode(emoji.Code)}"
|
||||
src="{HtmlEncode(
|
||||
await context.ResolveAssetUrlAsync(emoji.ImageUrl, cancellationToken)
|
||||
)}">
|
||||
"""
|
||||
);
|
||||
}
|
||||
@@ -293,14 +295,8 @@ internal partial class HtmlMarkdownVisitor(
|
||||
var name = role?.Name ?? "deleted-role";
|
||||
var color = role?.Color;
|
||||
|
||||
var style = color is not null
|
||||
? $"""
|
||||
color: rgb({color.Value.R}, {color.Value.G}, {color
|
||||
.Value
|
||||
.B}); background-color: rgba({color.Value.R}, {color.Value.G}, {color
|
||||
.Value
|
||||
.B}, 0.1);
|
||||
"""
|
||||
var style = color is { } c
|
||||
? $"color: rgb({c.R}, {c.G}, {c.B}); background-color: rgba({c.R}, {c.G}, {c.B}, 0.1);"
|
||||
: null;
|
||||
|
||||
buffer.Append(
|
||||
|
||||
Reference in New Issue
Block a user