sanitize input

This commit is contained in:
2026-03-10 03:23:30 +01:00
parent 923ec9f95d
commit 7bdb9524ad

View File

@@ -76,11 +76,14 @@ class Settings {
placeholder: "URL de l'image", placeholder: "URL de l'image",
tags: true, tags: true,
createTag: function (params) { createTag: function (params) {
const url = encodeURI(params.term);
if (/^(https?:\/\/.*\.(?:png|jpg|jpeg|gif|bmp|webp|svg))$/i.test(url)) {
return { return {
id: $.fn.select2.defaults.defaults.escapeMarkup(params.term), id: url,
text: 'Ajouté manuellement', text: 'Source externe',
newTag: true, newTag: true,
}; };
}
}, },
}); });
if (localStorage['skinURL']) { if (localStorage['skinURL']) {
@@ -91,8 +94,7 @@ class Settings {
$('#skinURLSelect').val(localStorage['skinURL']).trigger('change'); $('#skinURLSelect').val(localStorage['skinURL']).trigger('change');
} else { } else {
var option = new Option( var option = new Option(
localStorage['skinURL'], 'Source externe',
'Ajouté manuellement',
localStorage['skinURL'], localStorage['skinURL'],
true, true,
true, true,