squidy/qBittorrent
1
0
Fork 0
mirror of https://github.com/qbittorrent/qBittorrent.git synced 2025-12-22 00:17:23 -06:00
Code Issues Packages Projects Releases Wiki Activity

WebUI: fix dark mode in RSS entry viewer

Browse Source 
Use `allow-same-origin` sandbox directive to allow fetching the parent CSS.

PR #22536.
This commit is contained in:
Chocobo1
2025-04-12 17:54:55 +08:00
committed by GitHub
parent 9331580e86
commit 5465605377
1 changed files with 12 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
src/webui/www/private/views/rss.html
View File

@@ -494,10 +494,18 @@
detailsView.append(divElement); detailsView.append(divElement);
} }
// Place in iframe with sandbox attribute to prevent js execution const articleDescription = article.description;
const torrentDescription = document.createRange().createContextualFragment('<iframe sandbox id="rssDescription"></iframe>'); if (articleDescription !== undefined) {
$("rssDetailsView").append(torrentDescription); const rootColor = document.documentElement.classList.contains("dark") ? "class='dark'" : "";
document.getElementById("rssDescription").srcdoc = `<html><head><link rel="stylesheet" type="text/css" href="css/style.css"></head><body>${article.description}</body></html>`;
// Place in iframe with sandbox attribute to prevent js execution
const iframeElement = document.createElement("iframe");
iframeElement.id = "rssDescription";
iframeElement.sandbox = "allow-same-origin"; // allowed to get parent css
iframeElement.srcdoc = `<html ${rootColor}><head><meta charset="utf-8"><link rel="stylesheet" type="text/css" href="css/style.css?v=${CACHEID}"></head><body>${articleDescription}</body></html>`;
detailsView.append(iframeElement);
}
}; };
const updateRssFeedList = () => { const updateRssFeedList = () => {