Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-03-02 02:21:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: guard against directional override characters in translator args

Browse Source
This commit is contained in:
Julian Lam
2025-02-21 21:40:25 -05:00
parent 589be1438e
commit 98eb61393b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
public/src/modules/translator.common.js
View File

@@ -260,7 +260,7 @@ module.exports = function (utils, load, warn) {
return Promise.all(argsToTranslate).then(function (translatedArgs) {
let out = translated;
translatedArgs.forEach(function (arg, i) {
let escaped = arg.replace(/%(?=\d)/g, '%').replace(/\\,/g, ',');
let escaped = `<bdi>${arg.replace(/%(?=\d)/g, '&#37;').replace(/\\,/g, '&#44;')}</bdi>`;
// fix double escaped translation keys, see https://github.com/NodeBB/NodeBB/issues/9206
escaped = escaped.replace(/&amp;lsqb;/g, '&lsqb;')
.replace(/&amp;rsqb;/g, '&rsqb;');