mirror of
https://github.com/duckietm/Nitro-V3.git
synced 2026-06-19 15:06:20 +00:00
DuckieTM
7ffb213ce7
- XSS fix: Created SanitizeHtml.ts utility using DOMPurify (already in package.json but never used). Wrapped all 21 dangerouslySetInnerHTML calls in catalog views with SanitizeHtml() — only allows safe tags (b, i, u, br, span, div, p, a, strong, em, img) - Race condition fix: Added 10-second timeout fallbacks on purchase flags in CatalogPurchaseWidgetView and CatalogGiftView so the flag auto-resets even if the server never responds
43 lines
2.2 KiB
TypeScript
43 lines
2.2 KiB
TypeScript
import { FC } from 'react';
|
|
import { SanitizeHtml } from '../../../../../api';
|
|
import { Column, Grid, Text } from '../../../../../common';
|
|
import { CatalogAddOnBadgeWidgetView } from '../widgets/CatalogAddOnBadgeWidgetView';
|
|
import { CatalogBundleGridWidgetView } from '../widgets/CatalogBundleGridWidgetView';
|
|
import { CatalogFirstProductSelectorWidgetView } from '../widgets/CatalogFirstProductSelectorWidgetView';
|
|
import { CatalogPurchaseWidgetView } from '../widgets/CatalogPurchaseWidgetView';
|
|
import { CatalogSimplePriceWidgetView } from '../widgets/CatalogSimplePriceWidgetView';
|
|
import { CatalogLayoutProps } from './CatalogLayout.types';
|
|
|
|
export const CatalogLayoutSingleBundleView: FC<CatalogLayoutProps> = props =>
|
|
{
|
|
const { page = null } = props;
|
|
|
|
return (
|
|
<>
|
|
<CatalogFirstProductSelectorWidgetView />
|
|
<Grid>
|
|
<Column overflow="hidden" size={ 7 }>
|
|
{ !!page.localization.getText(2) &&
|
|
<Text dangerouslySetInnerHTML={ { __html: SanitizeHtml(page.localization.getText(2)) } } /> }
|
|
<Column grow className="bg-muted p-2 rounded" overflow="hidden">
|
|
<CatalogBundleGridWidgetView fullWidth className="nitro-catalog-layout-bundle-grid" />
|
|
</Column>
|
|
</Column>
|
|
<Column gap={ 1 } overflow="hidden" size={ 5 }>
|
|
{ !!page.localization.getText(1) &&
|
|
<Text center small overflow="auto">{ page.localization.getText(1) }</Text> }
|
|
<Column grow gap={ 0 } overflow="hidden" position="relative">
|
|
{ !!page.localization.getImage(1) &&
|
|
<img alt="" className="grow!" src={ page.localization.getImage(1) } /> }
|
|
<CatalogAddOnBadgeWidgetView className="bg-muted rounded bottom-0 inset-s-0" position="absolute" />
|
|
<CatalogSimplePriceWidgetView />
|
|
</Column>
|
|
<div className="flex flex-col gap-1">
|
|
<CatalogPurchaseWidgetView />
|
|
</div>
|
|
</Column>
|
|
</Grid>
|
|
</>
|
|
);
|
|
};
|