From 3abcfe90bc8f41a63b89e898f0f87000752e92ae Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=99=88=E7=B2=BE=E5=8D=8E?= <842761733@qq.com>
Date: Tue, 13 Dec 2022 16:26:23 +0800
Subject: [PATCH] =?UTF-8?q?XML=E6=96=87=E6=9C=AC=E8=BD=AC=E4=B9=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 server/src/main/resources/web/xml.ftl | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/server/src/main/resources/web/xml.ftl b/server/src/main/resources/web/xml.ftl
index 1b340969..203580c5 100644
--- a/server/src/main/resources/web/xml.ftl
+++ b/server/src/main/resources/web/xml.ftl
@@ -46,8 +46,24 @@
     /**
      * 加载xml数据
      */
+    function htmlEscape(str){
+        var s = "";
+        if(str.length == 0) return "";
+        s = str.replace(/&amp;/g,"&");
+        s = str.replace(/&amp;amp;/g,"&");
+        s = s.replace(/&lt;/g,"<");
+        s = s.replace(/&gt;/g,">");
+        s = s.replace(/&nbsp;/g," ");
+        s = s.replace(/&#39;/g,"\'");
+        s = s.replace(/&quot;/g,"\"");
+        s = s.replace(/<script.*?>.*?<\/script>/ig, '');
+        s = s.replace(/<script/gi, "&lt;script ");
+        s = s.replace(/<iframe/gi, "&lt;iframe ");
+        return s;
+    }
     function loadXmlData() {
         var textData = Base64.decode($("#textData").val())
+        textData = htmlEscape(textData);
         window.textPreData = "<xmp style='background-color: #FFFFFF;overflow-y: scroll;border:none'>" + textData + "</xmp>";
         var xmlNode = xmlTreeViewer.parseXML(textData);
         window.retNode = xmlTreeViewer.getXMLViewerNode(xmlNode.xml);