self-hosted/LibreTranslate
1
0
Fork 0
mirror of https://github.com/LibreTranslate/LibreTranslate.git synced 2025-07-12 22:22:02 +02:00
Code Issues Releases Activity

Properly escape data in the request code

Browse Source 
It was only escaping the first quote, all other quotes and other characters that require to be escaped (like line breaks) were not being escaped. JSON.stringify is a good function to handle this.
This commit is contained in:
Gustavo Rodrigues
2021-12-09 10:31:48 -03:00
committed by GitHub
parent 94c27e3645
commit 64ae20e932
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
app/static/js/app.js
View File

@ -145,9 +145,9 @@ document.addEventListener('DOMContentLoaded', function(){
return ['const res = await fetch("' + this.BaseUrl + '/translate", {', return ['const res = await fetch("' + this.BaseUrl + '/translate", {',
' method: "POST",', ' method: "POST",',
' body: JSON.stringify({', ' body: JSON.stringify({',
' q: "' + this.$options.filters.escape(this.inputText) + '",', ' q: ' + this.$options.filters.escape(this.inputText) + ',',
' source: "' + this.$options.filters.escape(this.sourceLang) + '",', ' source: ' + this.$options.filters.escape(this.sourceLang) + ',',
' target: "' + this.$options.filters.escape(this.targetLang) + '",', ' target: ' + this.$options.filters.escape(this.targetLang) + ',',
' format: "' + (this.isHtml ? "html" : "text") + '"', ' format: "' + (this.isHtml ? "html" : "text") + '"',
' }),', ' }),',
' headers: { "Content-Type": "application/json" }', ' headers: { "Content-Type": "application/json" }',
@ -167,7 +167,7 @@ document.addEventListener('DOMContentLoaded', function(){
}, },
filters: { filters: {
escape: function(v){ escape: function(v){
return v.replace('"', '\\\"'); return JSON.stringify(v);
}, },
highlight: function(v){ highlight: function(v){
return Prism.highlight(v, Prism.languages.javascript, 'javascript'); return Prism.highlight(v, Prism.languages.javascript, 'javascript');