提交

web-admin/src/components/business/product-view-dialog/index.vue

@@ -153,7 +153,7 @@
           <span>详情内容</span>
         </div>
         <div class="content-editor-section">
-          <div class="view-content-html" v-html="formData.detailContent || ''"></div>
+          <div class="view-content-html" v-html="safeDetailContent"></div>
         </div>
       </div>
 
@@ -301,6 +301,7 @@
   import { computed, reactive, ref, watch } from 'vue'
   import { Close, Document, Money, Picture, Setting, VideoPlay } from '@element-plus/icons-vue'
   import { buildTreePathLabelFromFlat } from '@/utils/tree-path'
+  import { sanitizeHtml } from '@/utils/sanitize-html'
   import {
     fetchProductDetail,
     fetchCategoryList,
@@ -356,6 +357,8 @@
     detailContent: ''
   })
 
+  const safeDetailContent = computed(() => sanitizeHtml(formData.detailContent))
+
   const isCategoryEnabled = (c: any) => {
     const v = c?.isActive ?? c?.is_active
     return v === true || v === 1