a-debug

code/app/home/view/videoDadi/index/index.html

@@ -130,7 +130,7 @@
     </div>
     <h1 class="view-title">
         <a href="/">{$DomainModel->d_name}</a>-{$DomainModel->d_text_logo}
-    </h1>
+    </h1>    
     <h4 class="view-description">{site:replace code="VIDEO@GETCATEGORYINDEX@TEXT"}</h4>
     <div class="row">
         <div class="cs-list-b"></div>

code/public/public/fu/fu.js

@@ -306,7 +306,7 @@ function replaceList() {
         // 3）修改标题 <h3>
         const titleEl = firstItem.querySelector('h3');
         if (titleEl && CsData.title) {
-            titleEl.textContent = CsData.title;
+            titleEl.textContent = escapeHtml(decodeHtmlEntities(CsData.title)); // 防止XSS
         }
     }