Wiki cards/digest: render teaser HTML via sanitizeHtml

This commit is contained in:
Kato
2026-09-08 16:43:31 +00:00
parent 2a4ca2f141
commit f0cf630fb6
+1 -1
View File
@@ -877,7 +877,7 @@ function renderWikiCards(data) {
card.innerHTML = '<span class="wiki-topic-badge" style="' + badgeStyle + '">' + escapeHtml(topic).toUpperCase() + '</span>' + card.innerHTML = '<span class="wiki-topic-badge" style="' + badgeStyle + '">' + escapeHtml(topic).toUpperCase() + '</span>' +
'<h3 class="wiki-subtopic-headline">' + escapeHtml(subtopic) + '</h3>' + '<h3 class="wiki-subtopic-headline">' + escapeHtml(subtopic) + '</h3>' +
'<p class="wiki-teaser">' + escapeHtml(teaser) + teaserEnd + '</p>' + '<p class="wiki-teaser">' + sanitizeHtml(teaser) + teaserEnd + '</p>' +
'<div class="wiki-card-meta">' + '<div class="wiki-card-meta">' +
'<span class="wiki-date">' + dateStr + '</span>' + '<span class="wiki-date">' + dateStr + '</span>' +
'<span class="wiki-read-more">Weiterlesen</span>' + '<span class="wiki-read-more">Weiterlesen</span>' +