3pp-mirror/penpot
1
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2025-06-05 12:31:39 +02:00
Code Issues Projects Releases Packages Wiki Activity

🐛 Fix security concern

Browse source
This commit is contained in:
Alejandro Alonso 2022-05-17 12:56:06 +02:00
parent 5c2b5f7cda
commit 216b510900
1 changed files with 6 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
frontend/src/app/main/ui/shapes/svg_raw.cljs
View file

@ -94,9 +94,10 @@
{:keys [content]} shape
{:keys [tag]} content
svg-root? (and (map? content) (= tag :svg))
svg-tag? (map? content)
svg-leaf? (string? content)]
svg-root? (and (map? content) (= tag :svg))
svg-tag? (map? content)
svg-leaf? (string? content)
valid-tag? (contains? usvg/svg-tags-list tag)]
(cond
svg-root?
@ -104,12 +105,12 @@
(for [item childs]
[:& shape-wrapper {:shape item :key (dm/str (:id item))}])]
svg-tag?
(and svg-tag? valid-tag?)
[:& svg-element {:shape shape}
(for [item childs]
[:& shape-wrapper {:shape item :key (dm/str (:id item))}])]
svg-leaf?
(and svg-leaf? valid-tag?)
content
:else nil))))