GrapesJS / GrapesJS/components-custom-code
Script Tag is sanitized in the output
未关闭
- 主要语言
- TypeScript
- 星标
- 81
- 派生
- 47
- PR 合并指标
- 30 天内没有已合并 PR
描述
Hello,
When using the following custom code
```html
alert('hi')
```
The result would sanitize the script tag as following
```html
<script>alert('hi')</script>
```
Am I missing anything?
贡献指南
这个仓库没有索引到贡献指南
调研方向
The issue provides an HTML reproduction involving a script tag, but names no file, test, or intended handling. Start by reproducing the custom-code output and tracing where the script tag is sanitized. Done should be defined by the project’s intended behavior for embedded script markup and covered by a regression check.
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- html, typescript
- 领域
- frontend, security
- Issue 类型
- 缺陷
- 难度
- 3/5
- 预计耗时
- 1-2 天
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 35/100