From b4a1e5dd332be652e0bc376fd9256886cf4bbde9 Mon Sep 17 00:00:00 2001 From: zhixin Date: Tue, 10 May 2022 10:59:07 +0800 Subject: [PATCH] Fixed XSS vulnerability bug by onCellHtmlData --- .../export/bootstrap-table-export.js | 20 ++++--------------- 1 file changed, 4 insertions(+), 16 deletions(-) diff --git a/src/extensions/export/bootstrap-table-export.js b/src/extensions/export/bootstrap-table-export.js index 55dcd3bc09..fe6ee5a6c9 100644 --- a/src/extensions/export/bootstrap-table-export.js +++ b/src/extensions/export/bootstrap-table-export.js @@ -23,15 +23,7 @@ $.extend($.fn.bootstrapTable.defaults, { showExport: false, exportDataType: 'basic', // basic, all, selected exportTypes: ['json', 'xml', 'csv', 'txt', 'sql', 'excel'], - exportOptions: { - onCellHtmlData (cell, rowIndex, colIndex, htmlData) { - if (cell.is('th')) { - return cell.find('.th-inner').text() - } - - return htmlData - } - }, + exportOptions: {}, exportFooter: false }) @@ -162,13 +154,9 @@ $.BootstrapTable = class extends $.BootstrapTable { $exportButtons.click(e => { e.preventDefault() - const type = $(e.currentTarget).data('type') - const exportOptions = { - type, - escape: false - } - - this.exportTable(exportOptions) + this.exportTable({ + type: $(e.currentTarget).data('type') + }) }) this.handleToolbar() }