From 7ed85177719f035367bbc186ddf7ee3684624647 Mon Sep 17 00:00:00 2001 From: BaiMeow Date: Wed, 26 Apr 2023 21:24:14 +0800 Subject: [PATCH] fix: innerHTML may leads to script execution --- app/utils.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/utils.ts b/app/utils.ts index dfec8d3e9..1da65c993 100644 --- a/app/utils.ts +++ b/app/utils.ts @@ -129,7 +129,7 @@ export function autoGrowTextArea(dom: HTMLTextAreaElement) { const width = getDomContentWidth(dom); measureDom.style.width = width + "px"; - measureDom.innerHTML = dom.value.trim().length > 0 ? dom.value : "1"; + measureDom.innerText = dom.value.trim().length > 0 ? dom.value : "1"; const lineWrapCount = Math.max(0, dom.value.split("\n").length - 1); const height = parseFloat(window.getComputedStyle(measureDom).height);