3pp-mirror/penpot
1
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2025-06-19 05:01:38 +02:00
Code Issues Projects Releases Packages Wiki Activity

🐛 Fix security concern

Browse source
This commit is contained in:
Alejandro Alonso 2022-05-17 12:56:06 +02:00
parent 5c2b5f7cda
commit 216b510900
1 changed files with 6 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
frontend/src/app/main/ui/shapes/svg_raw.cljs
View file

@ -94,9 +94,10 @@
{:keys [content]} shape {:keys [content]} shape
{:keys [tag]} content {:keys [tag]} content
svg-root? (and (map? content) (= tag :svg)) svg-root? (and (map? content) (= tag :svg))
svg-tag? (map? content) svg-tag? (map? content)
svg-leaf? (string? content)] svg-leaf? (string? content)
valid-tag? (contains? usvg/svg-tags-list tag)]
(cond (cond
svg-root? svg-root?
@ -104,12 +105,12 @@
(for [item childs] (for [item childs]
[:& shape-wrapper {:shape item :key (dm/str (:id item))}])] [:& shape-wrapper {:shape item :key (dm/str (:id item))}])]
svg-tag? (and svg-tag? valid-tag?)
[:& svg-element {:shape shape} [:& svg-element {:shape shape}
(for [item childs] (for [item childs]
[:& shape-wrapper {:shape item :key (dm/str (:id item))}])] [:& shape-wrapper {:shape item :key (dm/str (:id item))}])]
svg-leaf? (and svg-leaf? valid-tag?)
content content
:else nil)))) :else nil))))