multipleof4/ntfy
1
0
Fork 0
mirror of https://github.com/multipleof4/ntfy.git synced 2026-10-12 14:55:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Low: Fix self-XSS in SVGs

Browse Source
This commit is contained in:
binwiederhier
2026-05-17 09:57:41 -04:00
parent 160c916ce0
commit 29113402ce
5 changed files with 22 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/src/app/notificationUtils.js
+1 -1
View File
@@ -35,7 +35,7 @@ export const formatMessage = (m) => {
return m.message || "";
};
const imageRegex = /\.(png|jpe?g|gif|webp)$/i;
export const imageRegex = /\.(png|jpe?g|gif|webp)$/i;
export const isImage = (attachment) => {
if (!attachment) return false;
web/src/app/utils.js
+1 -2
View File
@@ -145,8 +145,7 @@ export const hashCode = (s) => {
* which is expected by `<html lang>` and `Intl.DateTimeFormat`. Falls back to "en"
* if the input is missing or not a string.
*/
export const getKebabCaseLangStr = (language) =>
typeof language === "string" && language.length > 0 ? language.replace(/_/g, "-") : "en";
export const getKebabCaseLangStr = (language) => (typeof language === "string" && language.length > 0 ? language.replace(/_/g, "-") : "en");
export const formatShortDateTime = (timestamp, language) =>
new Intl.DateTimeFormat(getKebabCaseLangStr(language), {