mirror of
https://github.com/infiniflow/ragflow.git
synced 2025-11-26 06:57:27 +00:00
fix xss in excel_parser (#9909)
### What problem does this PR solve? ### Type of change - [x] Bug Fix (non-breaking change which fixes an issue) - [x] Refactoring - [x] Performance Improvement Signed-off-by: zhanluxianshen <zhanluxianshen@163.com>
This commit is contained in:
parent
9b724b3b5e
commit
1ee9c0b8d9
@ -124,7 +124,7 @@ class RAGFlowExcelParser:
|
|||||||
if c.value is None:
|
if c.value is None:
|
||||||
tb += "<td></td>"
|
tb += "<td></td>"
|
||||||
else:
|
else:
|
||||||
tb += f"<td>{c.value}</td>"
|
tb += f"<td>{escape(_fmt(c.value))}</td>"
|
||||||
tb += "</tr>"
|
tb += "</tr>"
|
||||||
tb += "</table>\n"
|
tb += "</table>\n"
|
||||||
tb_chunks.append(tb)
|
tb_chunks.append(tb)
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user