fix(DH): Prevent XSS

geonetwork · Nov 29, 2023 · c1c3371 · c1c3371
1 parent 998c2e2
commit c1c3371
Show file tree

Hide file tree

Showing 5 changed files with 4 additions and 42 deletions.
diff --git a/libs/ui/elements/src/lib/metadata-info/metadata-info.component.html b/libs/ui/elements/src/lib/metadata-info/metadata-info.component.html
@@ -8,7 +8,7 @@
   <gn-ui-content-ghost ghostClass="h-32" [showContent]="fieldReady('abstract')">
     <p
       class="whitespace-pre-line break-words"
-      [innerHTML]="metadata.abstract | safe: 'html'"
+      [innerHTML]="metadata.abstract"
       *ngIf="metadata.abstract"
     ></p>
   </gn-ui-content-ghost>

diff --git a/libs/ui/elements/src/lib/thumbnail/thumbnail.component.html b/libs/ui/elements/src/lib/thumbnail/thumbnail.component.html
@@ -12,7 +12,7 @@
     alt="thumbnail"
     loading="lazy"
     (load)="setObjectFit()"
-    [src]="imgUrl | safe: 'url'"
+    [src]="imgUrl"
     (error)="useFallback()"
   />
 </div>
diff --git a/libs/util/shared/src/lib/pipes/SafePipe.ts b/libs/util/shared/src/lib/pipes/SafePipe.ts
diff --git a/libs/util/shared/src/lib/pipes/index.ts b/libs/util/shared/src/lib/pipes/index.ts
diff --git a/libs/util/shared/src/lib/util-shared.module.ts b/libs/util/shared/src/lib/util-shared.module.ts
@@ -1,11 +1,10 @@
 import { NgModule } from '@angular/core'
-import { SafePipe } from './pipes/SafePipe'
 import { CommonModule } from '@angular/common'
 import { ImageFallbackDirective } from './image-fallback.directive'
 
 @NgModule({
-  declarations: [SafePipe, ImageFallbackDirective],
+  declarations: [ImageFallbackDirective],
   imports: [CommonModule],
-  exports: [SafePipe, ImageFallbackDirective],
+  exports: [ImageFallbackDirective],
 })
 export class UtilSharedModule {}