|
|
@@ -15,6 +15,7 @@
|
|
|
// limitations under the License.
|
|
|
|
|
|
import $ from 'jquery';
|
|
|
+import hueUtils from 'utils/hueUtils';
|
|
|
|
|
|
/*
|
|
|
* jHue notify plugin
|
|
|
@@ -50,6 +51,7 @@ Plugin.prototype.show = function () {
|
|
|
const MARGIN = 4;
|
|
|
|
|
|
_this.options.message = _this.options.message.replace(/(<([^>]+)>)/gi, ''); // escape HTML messages
|
|
|
+ _this.options.message = hueUtils.deXSS(_this.options.message); // escape XSS messages
|
|
|
|
|
|
if (
|
|
|
_this.options.message !== '' &&
|