fix: XSS vulnerability

mermaid-js · Aug 21, 2023 · 2967b3c · 2967b3c
1 parent 534fd85
commit 2967b3c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/packages/mermaid/src/utils.ts b/packages/mermaid/src/utils.ts
@@ -105,6 +105,7 @@ export const detectInit = function (
 
   if (Array.isArray(inits)) {
     const args = inits.map((init) => init.args);
+    sanitizeDirective(args);
     results = assignWithDepth(results, [...args]);
   } else {
     results = inits.args;