mirror of
https://github.com/infiniflow/ragflow.git
synced 2025-11-24 22:16:57 +00:00
fix xss in excel_parser (#9909)
### What problem does this PR solve? ### Type of change - [x] Bug Fix (non-breaking change which fixes an issue) - [x] Refactoring - [x] Performance Improvement Signed-off-by: zhanluxianshen <zhanluxianshen@163.com>
This commit is contained in:
parent
9b724b3b5e
commit
1ee9c0b8d9
@ -124,7 +124,7 @@ class RAGFlowExcelParser:
|
||||
if c.value is None:
|
||||
tb += "<td></td>"
|
||||
else:
|
||||
tb += f"<td>{c.value}</td>"
|
||||
tb += f"<td>{escape(_fmt(c.value))}</td>"
|
||||
tb += "</tr>"
|
||||
tb += "</table>\n"
|
||||
tb_chunks.append(tb)
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user