github
/
layui
mirror of https://github.com/layui/layui
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

fix: 优化 escape 和 unescape 在解析某些特殊字符串时的潜在问题 (#2628) 

* fix: 修复 escape 未转义 unicode 中 & 字符的问题

* chore: update

* fix: 优化 unescape 替换顺序，确保为 escape 替换的反向顺序

* chore: update
2.9.x-stable
贤心 2025-04-15 13:23:32 +08:00
parent 28da41f5ac
commit aedd2862a6
2 changed files with 21 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
docs/laytpl/detail/demo.md
View File

@ -32,7 +32,8 @@
<div>数据</div> <div>数据</div>
&lt;textarea id="ID-tpl-data"&gt; &lt;textarea id="ID-tpl-data"&gt;
{ {
"title": "Layui 常用模块", "title": "Layui 常用组件",
"desc": "<a style=\"color:blue;\">一段带 HTML 的内容</a>",
"list": [ "list": [
{ {
"modname": "弹层", "modname": "弹层",

17
src/modules/util.js
View File

@ -323,25 +323,24 @@ layui.define('jquery', function(exports){
// 转义 html // 转义 html
escape: function(html){ escape: function(html){
var exp = /[<"'>]|&(?=#[a-zA-Z0-9]+)/g; var exp = /[<"'>]|&(?=#?[a-zA-Z0-9]+)/g;
if(html === undefined || html === null) return ''; if (html === undefined || html === null) return '';
html += ''; html += '';
if(!exp.test(html)) return html; if (!exp.test(html)) return html;
return html.replace(/&(?!#?[a-zA-Z0-9]+;)/g, '&amp;') return html.replace(/&(?=#?[a-zA-Z0-9]+;?)/g, '&amp;')
.replace(/</g, '&lt;').replace(/>/g, '&gt;') .replace(/</g, '&lt;').replace(/>/g, '&gt;')
.replace(/'/g, '&#39;').replace(/"/g, '&quot;'); .replace(/'/g, '&#39;').replace(/"/g, '&quot;');
}, },
// 还原转义的 html // 还原转义的 html
unescape: function(html){ unescape: function(html){
if(html === undefined || html === null) html = ''; if (html === undefined || html === null) return '';
html += '';
return html.replace(/\&amp;/g, '&') return String(html).replace(/\&quot;/g, '"').replace(/\&#39;/g, '\'')
.replace(/\&lt;/g, '<').replace(/\&gt;/g, '>') .replace(/\&gt;/g, '>').replace(/\&lt;/g, '<')
.replace(/\&#39;/g, '\'').replace(/\&quot;/g, '"'); .replace(/\&amp;/g, '&');
}, },
// 打开新窗口 // 打开新窗口