Zengtudor/Nuxt
1
0
Fork 0
mirror of https://github.com/nuxt/nuxt.git synced 2025-03-19 07:51:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(ui-templates): escape inline scripts correctly in ui templates

Browse Source
This commit is contained in:
Daniel Roe 2025-03-02 19:34:15 +00:00
parent 97ec3143a5
commit 39c2b0a2c4
No known key found for this signature in database
GPG Key ID: CBC814C393D93268
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
packages/ui-templates/lib/render.ts
View File

@ -157,8 +157,8 @@ export const RenderPlugin = () => {
`const props = defineProps(${props})`,
title && 'useHead(' + genObjectFromRawEntries([
['title', `\`${title}\``],
['script', inlineScripts.map(s => ({ children: `\`${s}\`` }))],
['style', [{ children: `\`${globalStyles}\`` }]],
['script', inlineScripts.map(s => ({ children: `\`${s.replace(/[`$]/g, '\\$&')}\`` }))],
['style', [{ children: `\`${globalStyles.replace(/[`$]/g, '\\$&')}\`` }]],
]) + ')',
'</script>',
'<template>',