Fix stored XSS in the graphviz error message rendering [Security Issue]

Signed-off-by: Max Wu <jackymaxj@gmail.com> Co-Authored-By: Sheogorath <sheogorath@shivering-isles.com>
2019-04-14 12:07:16 -04:00
parent 074198f941
commit fb399ebe73
2 changed files with 8 additions and 6 deletions
--- a/package.json
+++ b/package.json
@@ -37,6 +37,7 @@
    "diff-match-patch": "git+https://github.com/hackmdio/diff-match-patch.git",
    "ejs": "^2.5.5",
    "emojify.js": "~1.1.0",
+    "escape-html": "^1.0.3",
    "express": ">=4.14",
    "express-session": "^1.14.2",
    "file-saver": "^1.3.3",