disco
disco copied to clipboard
Remove html injections
Currently in the tasks.json, the description is html code, so when we load it we are then injecting it into the vue template. It is bad practice to inject html code, especially since we will allow users to create tasks (and add information), this could be exploited.
The injection happens in line 24 in TaskList.vue
:
<span v-html="task.displayInformation.summary"></span>
Once this is done we can remove the corresponding error that is being muted in the .eslintrc.json
(something about no-v-html).