diff --git a/src/lib/editorFile.js b/src/lib/editorFile.js index 32907db68..1b99f3b30 100644 --- a/src/lib/editorFile.js +++ b/src/lib/editorFile.js @@ -1,6 +1,7 @@ import Sidebar from "components/sidebar"; import tile from "components/tile"; import confirm from "dialogs/confirm"; +import DOMPurify from "dompurify"; import fsOperation from "fileSystem"; import startDrag from "handlers/editorFileTab"; import tag from "html-tag-js"; @@ -244,7 +245,12 @@ export default class EditorFile { const content = tag("div", { className: "tab-page-content", }); - content.appendChild(options.content); + + if (typeof options.content === "string") { + content.innerHTML = DOMPurify.sanitize(options.content); + } else { + content.appendChild(options.content); + } // Append content container to shadow DOM shadow.appendChild(content);