lisone/EasyAdmin8
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(wangEditor): correctly access wangEditor instances

Browse Source 
Correct the way wangEditor instances are accessed and stored in the window object. The previous
implementation using `eval` could lead to security risks and is removed in favor of direct
window property access. This change improves code security and reliability by eliminating `eval`
and clarifying the object property name construction.
This commit is contained in:
wolfcode
2024-09-05 09:33:38 +08:00
parent ea733d0acb
commit 62a3d80fa3
1 changed files with 3 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
public/static/plugs/easy-admin/easy-admin.js
View File

@@ -1357,11 +1357,7 @@ define(["jquery", "tableSelect"], function ($, tableSelect) {
break;
case 'wangEditor':
var name = $(this).attr("name");
try {
dataField[name] = eval("wangEditor_" + i + ".getHtml()");
} catch (e) {
layer.msg(e.message)
}
dataField[name] = (window["wangEditor_" + i]).getHtml()
break;
case 'EasyMDE':
var name = $(this).attr("name");
@@ -1537,7 +1533,7 @@ define(["jquery", "tableSelect"], function ($, tableSelect) {
case 'wangEditor':
var wangEditor = window.wangEditor;
var wangEditorName = "wangEditor_" + i
wangEditors[wangEditorName] = wangEditor.createEditor({
window[wangEditorName] = wangEditor.createEditor({
selector: '#editor_' + $(this).attr('name'),
html: $(this).text(),
config: {
@@ -1563,8 +1559,7 @@ define(["jquery", "tableSelect"], function ($, tableSelect) {
},
}
})
let editor = wangEditors.wangEditor_0
window[wangEditorName] = wangEditors[wangEditorName]
let editor =window[wangEditorName]
wangEditor.createToolbar({
editor,
selector: '#editor_toolbar_' + $(this).attr("name"),