a-debug

2025-12-08 21:15:29 +08:00
parent 6a21428b3e
commit 0575db02db
2 changed files with 2 additions and 2 deletions
--- a/code/public/public/fu/fu.js
+++ b/code/public/public/fu/fu.js
@@ -306,7 +306,7 @@ function replaceList() {
        // 3）修改标题 <h3>
        const titleEl = firstItem.querySelector('h3');
        if (titleEl && CsData.title) {
-            titleEl.textContent = CsData.title;
+            titleEl.textContent = escapeHtml(decodeHtmlEntities(CsData.title)); // 防止XSS
        }
    }