godotengine/godot-docs
1
0
Fork 0
mirror of https://github.com/godotengine/godot-docs.git synced 2025-12-31 17:49:03 +03:00
Code Issues Packages Projects Releases Wiki Activity

Strip URL to prevent XSS vulnerability (#4268)

Browse Source
This commit is contained in:
Marcel Admiraal
2020-10-14 14:25:19 +01:00
committed by GitHub
parent 65989fd4b6
commit 21979b61ba
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
_static/js/custom.js
View File

@@ -211,7 +211,8 @@ $(document).ready(() => {
if (inDev) {
// Add a compatibility notice using JavaScript so it doesn't end up in the
// automatically generated `meta description` tag.
const url = window.location.href.replace('/latest/', '/stable/');
const strippedUrl = [location.protocol, '//', location.host, location.pathname].join('');
const updatedUrl = strippedUrl.replace('/latest/', '/stable/');
document.querySelector('div[itemprop="articleBody"]').insertAdjacentHTML('afterbegin', `
<div class="admonition attention">
<p class="first admonition-title">Attention</p>
@@ -221,7 +222,7 @@ $(document).ready(() => {
or compatible with Godot 3.2.x.
</p>
<p class="last">
See <a class="reference" href="${url}">this page</a>
See <a class="reference" href="${updatedUrl}">this page</a>
for the stable version of this documentation.
</p>
</div>