From e0ba452eaffb6f645f3cea85da3d5c9aadba4e06 Mon Sep 17 00:00:00 2001 From: anupamme Date: Mon, 3 Aug 2026 22:16:43 +0000 Subject: [PATCH] fix: V-001 security vulnerability Automated security fix generated by OrbisAI Security --- src/mixins/datatable.js | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/mixins/datatable.js b/src/mixins/datatable.js index d14ee455d..d2cee5067 100644 --- a/src/mixins/datatable.js +++ b/src/mixins/datatable.js @@ -86,6 +86,14 @@ export default { style.remove(); }); + doc.body.querySelectorAll("*").forEach((el) => { + Array.from(el.attributes).forEach((attr) => { + if (attr.name.startsWith("on") || /^javascript:/i.test(attr.value)) { + el.removeAttribute(attr.name); + } + }); + }); + return doc.body.innerHTML; }, changePage(page) {