-
Notifications
You must be signed in to change notification settings - Fork 4.1k
need to use jquery-i18next in popover content formatter #7782
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
WalkthroughThe pull request introduces enhancements to the Changes
Assessment against linked issues
Possibly related PRs
Suggested reviewers
Poem
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actionable comments posted: 1
@@ -201,6 +201,7 @@ module.exports = class DocFormatter | |||
if language is @options.language then return text | |||
if language is 'javascript' and @options.language in ['java', 'cpp'] then return text | |||
return '' | |||
$("<div>#{content}</div>").i18n().html() |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ensure content is properly sanitized to prevent XSS vulnerabilities
Wrapping content
in a <div>
and then applying .i18n().html()
may introduce XSS risks if content
contains unescaped user-generated input. Please ensure that content
is properly sanitized before inserting it into the DOM to prevent potential security issues.
fix ENG-1310

Summary by CodeRabbit
New Features
Bug Fixes
Refactor