ember/front
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

优化安全性

Browse Source
This commit is contained in:
Ember 2024-10-05 16:20:57 +08:00
parent 7b1fb77829
commit b08a457e27
2 changed files with 18 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
tuimian/全国推荐免试攻读研究生（免初试、转段）信息公开管理服务系统.html
View File

@ -1,5 +1,7 @@
<!DOCTYPE html> <!DOCTYPE html>
<html version="4"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <html version="4"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<script src="全国推荐免试攻读研究生（免初试、转段）信息公开管理服务系统_files/js/purify.min.js"></script>
<title>全国推荐免试攻读研究生（免初试、转段）信息公开管理服务系统</title> <title>全国推荐免试攻读研究生（免初试、转段）信息公开管理服务系统</title>
<link rel="shortcut icon" href="https://t1.chei.com.cn/yz/favicon.ico"> <link rel="shortcut icon" href="https://t1.chei.com.cn/yz/favicon.ico">
@ -666,26 +668,30 @@ a.tip-important:hover,a.tip-success:hover {
document.getElementById('tutor').innerText = formData.tutor; document.getElementById('tutor').innerText = formData.tutor;
document.getElementById('planType').innerText = formData.planType; document.getElementById('planType').innerText = formData.planType;
document.getElementById('employmentType').innerText = formData.employmentType; document.getElementById('employmentType').innerText = formData.employmentType;
document.getElementById('infoText').innerHTML = formData.admissionOffice + ' ' + formData.sendTime;
document.getElementById('admission-notice').innerHTML = formData.sendContent; // 使用 DOMPurify 来净化需要插入 innerHTML 的地方
document.getElementById('infoText').innerHTML = DOMPurify.sanitize(formData.admissionOffice + ' ' + formData.sendTime);
document.getElementById('admission-notice').innerHTML = DOMPurify.sanitize(formData.sendContent);
// 获取元素 // 获取元素
const operationInfo = document.getElementById('operation-info'); const operationInfo = document.getElementById('operation-info');
// 判断 status 的值，动态修改内容 // 判断 status 的值，动态修改内容，使用 DOMPurify 对 HTML 进行净化
if (formData.status === "1") { if (formData.status === "1") {
operationInfo.innerHTML = '<i class="ui-tiptext-icon iconfont" title="接受"></i> 你于' + formData.opTime + '接受了' + formData.unit + '的待录取通知'; operationInfo.innerHTML = DOMPurify.sanitize(
'<i class="ui-tiptext-icon iconfont" title="接受"></i> 你于' + formData.opTime + '接受了' + formData.unit + '的待录取通知'
);
operationInfo.style.color = '#007F00'; // 绿色表示接受 operationInfo.style.color = '#007F00'; // 绿色表示接受
} else if (formData.status === "0") { } else if (formData.status === "0") {
operationInfo.innerHTML = '<i class="ui-tiptext-icon iconfont" title="拒绝"></i> 你于' + formData.opTime + '拒绝了' + formData.unit + '的待录取通知'; operationInfo.innerHTML = DOMPurify.sanitize(
'<i class="ui-tiptext-icon iconfont" title="拒绝"></i> 你于' + formData.opTime + '拒绝了' + formData.unit + '的待录取通知'
);
operationInfo.style.color = '#f03b4e'; // 红色表示拒绝 operationInfo.style.color = '#f03b4e'; // 红色表示拒绝
} }
} else {
} }
</script> </script>

3
tuimian/全国推荐免试攻读研究生（免初试、转段）信息公开管理服务系统_files/js/purify.min.js vendored Normal file
View File

File diff suppressed because one or more lines are too long