瀏覽代碼

refactor update-page.ts

Yuki Takei 1 年之前
父節點
當前提交
a1192779a2
共有 1 個文件被更改,包括 3 次插入3 次删除
  1. 3 3
      apps/app/src/server/routes/apiv3/page/update-page.ts

+ 3 - 3
apps/app/src/server/routes/apiv3/page/update-page.ts

@@ -18,8 +18,8 @@ import {
 } from '~/server/models';
 } from '~/server/models';
 import type { PageDocument, PageModel } from '~/server/models/page';
 import type { PageDocument, PageModel } from '~/server/models/page';
 import { preNotifyService } from '~/server/service/pre-notify';
 import { preNotifyService } from '~/server/service/pre-notify';
-import { xss, xssForRevisionId } from '~/server/service/xss';
 import { getYjsConnectionManager } from '~/server/service/yjs-connection-manager';
 import { getYjsConnectionManager } from '~/server/service/yjs-connection-manager';
+import { generalXssFilter } from '~/services/general-xss-filter';
 import loggerFactory from '~/utils/logger';
 import loggerFactory from '~/utils/logger';
 
 
 import { apiV3FormValidator } from '../../../middlewares/apiv3-form-validator';
 import { apiV3FormValidator } from '../../../middlewares/apiv3-form-validator';
@@ -121,7 +121,7 @@ export const updatePageHandlersFactory: UpdatePageHandlersFactory = (crowi) => {
         pageId, revisionId, body, origin,
         pageId, revisionId, body, origin,
       } = req.body;
       } = req.body;
 
 
-      const sanitizeRevisionId = revisionId == null ? undefined : xssForRevisionId.process(revisionId);
+      const sanitizeRevisionId = revisionId == null ? undefined : generalXssFilter.process(revisionId);
 
 
       // check page existence
       // check page existence
       const isExist = await Page.count({ _id: pageId }) > 0;
       const isExist = await Page.count({ _id: pageId }) > 0;
@@ -136,7 +136,7 @@ export const updatePageHandlersFactory: UpdatePageHandlersFactory = (crowi) => {
         const latestRevision = await Revision.findById(currentPage.revision).populate('author');
         const latestRevision = await Revision.findById(currentPage.revision).populate('author');
         const returnLatestRevision = {
         const returnLatestRevision = {
           revisionId: latestRevision?._id.toString(),
           revisionId: latestRevision?._id.toString(),
-          revisionBody: xss.process(latestRevision?.body),
+          revisionBody: latestRevision?.body,
           createdAt: latestRevision?.createdAt,
           createdAt: latestRevision?.createdAt,
           user: serializeUserSecurely(latestRevision?.author),
           user: serializeUserSecurely(latestRevision?.author),
         };
         };