From 83d05b719b2440ae68f8bd84cab50e929b5289e6 Mon Sep 17 00:00:00 2001
From: wangjiahao <1522128093@qq.com>
Date: Wed, 6 Dec 2023 14:55:00 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BC=98=E5=8C=96=E6=96=87=E6=9C=ACXSS?=
 =?UTF-8?q?=E6=A0=A1=E9=AA=8C=EF=BC=8C=E9=98=B2=E6=AD=A2=E5=87=BA=E7=8E=B0?=
 =?UTF-8?q?=E6=A8=A1=E7=89=88=E7=BC=96=E8=BE=91=E5=87=BA=E7=8E=B0=E5=8D=A1?=
 =?UTF-8?q?=E6=AD=BB=E7=8E=B0=E8=B1=A1=20#5258=20#6977?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../src/components/canvas/customComponent/VText.vue | 13 +++++--------
 1 file changed, 5 insertions(+), 8 deletions(-)

diff --git a/core/frontend/src/components/canvas/customComponent/VText.vue b/core/frontend/src/components/canvas/customComponent/VText.vue
index 8dbd863c42..dd82fed40b 100644
--- a/core/frontend/src/components/canvas/customComponent/VText.vue
+++ b/core/frontend/src/components/canvas/customComponent/VText.vue
@@ -18,7 +18,7 @@
       @mousedown="handleMousedown"
       @blur="handleBlur"
       @input="handleInput"
-      v-html="$xss(element.propValue)"
+      v-html="element.propValue"
     />
     <div
       v-if="!canEdit"
@@ -28,7 +28,7 @@
       @mousedown="handleMousedown"
       @blur="handleBlur"
       @input="handleInput"
-      v-html="$xss(element.propValue)"
+      v-html="element.propValue"
     />
   </div>
   <div
@@ -37,7 +37,7 @@
   >
     <div
       :style="{ verticalAlign: element.style.verticalAlign }"
-      v-html="$xss(textInfo)"
+      v-html="textInfo"
     />
   </div>
 </template>
@@ -45,6 +45,7 @@
 <script>
 import { keycodes } from '@/components/canvas/utils/shortcutKey.js'
 import { mapState } from 'vuex'
+import xssCheck from 'xss'
 
 export default {
   props: {
@@ -139,16 +140,12 @@ export default {
     },
 
     handleBlur(e) {
-      this.element.propValue = e.target.innerHTML || '&nbsp;'
+      this.element.propValue = xssCheck(e.target.innerHTML || '&nbsp;')
       this.canEdit = false
     },
 
     setEdit() {
       this.canEdit = true
-      this.selectText(this.$refs.text)
-    },
-
-    selectText(element) {
     },
 
     removeSelectText() {