opensource/n8n
3
0
Fork 0
mirror of https://github.com/n8n-io/n8n.git synced 2026-09-01 05:38:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

build(editor): Make frontend-utils htmlUtils loadable as native ESM (no-changelog) (#35622)

Browse Source 
Co-authored-by: Claude <noreply@anthropic.com>
This commit is contained in:
Alex Grozav
2026-08-13 13:11:18 +00:00
committed by GitHub
parent 1b4c0bab8e
commit de5ec12fd0
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/frontend/@n8n/frontend-utils/src/htmlUtils.ts
+8 -1
View File
@@ -1,5 +1,5 @@
import { toValue, type MaybeRef } from 'vue';
import xss, { escapeAttrValue, escapeHtml } from 'xss';
import xss from 'xss';
import { ALLOWED_HTML_ATTRIBUTES, ALLOWED_HTML_TAGS } from './constants/sanitization';
@@ -7,6 +7,13 @@ import { ALLOWED_HTML_ATTRIBUTES, ALLOWED_HTML_TAGS } from './constants/sanitiza
Constants and utility functions that help in HTML, CSS and DOM manipulation
*/
// `xss` is CJS with no `exports` map, so Node's lexer cannot see these as named
// exports and `import { ... }` throws at link time under native ESM.
const { escapeAttrValue, escapeHtml } = xss as unknown as {
escapeAttrValue: (str: string) => string;
escapeHtml: (str: string) => string;
};
/**
* Escapes HTML entities in a string to prevent HTML injection.
* This should be used for user input that will be displayed in HTML contexts.