diff --git a/app/js/common/version.js b/app/js/common/version.js index c25fc035..b45088be 100644 --- a/app/js/common/version.js +++ b/app/js/common/version.js @@ -190,7 +190,7 @@ function verck(ver) { } } if(show){ - Materialize.toast(obj.Text+toot+'(スライドして消去)', 86400); + Materialize.toast(escapeHTML(obj.Text)+toot+'(スライドして消去)', 86400); } } @@ -211,9 +211,6 @@ function infowebsocket(){ console.log(JSON.parse(mess.data)); var obj=JSON.parse(mess.data); if(obj.type!="counter"){ - if(obj.id*1<=localStorage.getItem("last-notice-id")){ - - }else{ localStorage.setItem("last-notice-id",obj.id) var show=true; if(obj.toot!=""){ @@ -242,9 +239,8 @@ function infowebsocket(){ } } if(show){ - Materialize.toast(obj.text+toot+'(スライドして消去)', 86400); + Materialize.toast(escapeHTML(obj.Text)+toot+'(スライドして消去)', 86400); } - } }else{ $("#persons").text(obj.text); } diff --git a/app/js/lang/lang.en.js b/app/js/lang/lang.en.js index bab2f536..2b4baef2 100644 --- a/app/js/lang/lang.en.js +++ b/app/js/lang/lang.en.js @@ -189,7 +189,7 @@ var lang={ "lang_parse_clientmute":"muted", "lang_parse_mute":" will be muted. You can remove on preferences.", "lang_parse_voted":"Voted", - "lang_parse_vote":"Voted", + "lang_parse_vote":"Vote", "lang_parse_unvoted":"Show the result without voting", "lang_parse_endedvote":"Expired", "lang_parse_thread":"Show thread", diff --git a/app/js/login/manager.js b/app/js/login/manager.js index efaf09b2..6c17a406 100644 --- a/app/js/login/manager.js +++ b/app/js/login/manager.js @@ -542,7 +542,7 @@ function getdata(domain, at) { console.log(json); if (json.error) { console.error("Error:" + json.error); - Materialize.toast(lang.lang_fatalerroroccured+"Error:" + json.error, + Materialize.toast(lang.lang_fatalerroroccured+"Error:" + escapeHTML(json.error), 5000); return; } @@ -817,7 +817,7 @@ input.addEventListener("focus", function() { Object.keys(json.instances).forEach(function(key) { var url = json.instances[key]; urls = urls + ' ' + url.name + ' '; + '\')" class="pointer">' +escapeHTML(url.name) + ' '; }); $("#ins-suggest").html(urls); } diff --git a/app/js/platform/first.js b/app/js/platform/first.js index a95edd06..4f1525d4 100644 --- a/app/js/platform/first.js +++ b/app/js/platform/first.js @@ -62,7 +62,7 @@ function formattime(date){ }else{ str=str+date.getMinutes() } - return str; + return escapeHTML(str); } function formattimeutc(date){ var str=date.getUTCFullYear()+"-"; @@ -87,7 +87,7 @@ function formattimeutc(date){ }else{ str=str+date.getUTCMinutes() } - return str; + return escapeHTML(str); } var electron = require("electron"); var ipc = electron.ipcRenderer; diff --git a/app/js/post/emoji.js b/app/js/post/emoji.js index 5f571c46..19038798 100644 --- a/app/js/post/emoji.js +++ b/app/js/post/emoji.js @@ -35,7 +35,7 @@ function emojiToggle(reaction) { //絵文字リスト挿入 function emojiGet(parse, started) { - $('#emoji-list').html('Loading...'); + $('#emoji-list').text('Loading...'); var acct_id = $("#post-acct-sel").val(); var domain = localStorage.getItem("domain_" + acct_id); if (localStorage.getItem("mode_" + domain) != "misskey") { @@ -52,7 +52,7 @@ function emojiGet(parse, started) { console.error(error); }).then(function (json) { if (parse == "true") { - $('#emoji-list').html('Parsing...'); + $('#emoji-list').text('Parsing...'); //絵文字をマストドン公式と同順にソート json.sort(function (a, b) { if (a.shortcode < b.shortcode) return -1; @@ -96,7 +96,7 @@ function emojiGet(parse, started) { }) }); if (parse == "true") { - $('#emoji-list').html('Parsing...'); + $('#emoji-list').text('Parsing...'); //絵文字をマストドン公式と同順にソート md.sort(function (a, b) { if (a.shortcode < b.shortcode) return -1; diff --git a/app/js/post/misskeystatus.js b/app/js/post/misskeystatus.js index 84366e83..ef78f07f 100644 --- a/app/js/post/misskeystatus.js +++ b/app/js/post/misskeystatus.js @@ -234,7 +234,7 @@ function voterefresh(acct_id,id){ }else{ var myvote=""; } - poll=poll+'