admin/aiagent
1
0
Fork 0
Code Issues 14 Pull Requests Actions Packages Projects Releases Wiki Activity

[中] AgentChat多处v-html无XSS防护 #93

New Issue
Closed
opened 2026-05-10 18:39:18 +08:00 by admin · 0 comments
admin commented 2026-05-10 18:39:18 +08:00
Owner
Copy Link

问题描述

frontend/src/views/AgentChat.vue 中有4处使用 v-html 渲染 LLM 输出内容，未使用 DOMPurify 等库进行 XSS 过滤。恶意 Agent 输出可执行任意 JavaScript。

涉及文件

  • frontend/src/views/AgentChat.vue

修复建议

对 v-html 绑定的内容使用 DOMPurify 清洗后再渲染。

严重程度

中 - XSS 风险

## 问题描述 frontend/src/views/AgentChat.vue 中有4处使用 v-html 渲染 LLM 输出内容，未使用 DOMPurify 等库进行 XSS 过滤。恶意 Agent 输出可执行任意 JavaScript。 ## 涉及文件 - frontend/src/views/AgentChat.vue ## 修复建议 对 v-html 绑定的内容使用 DOMPurify 清洗后再渲染。 ## 严重程度 中 - XSS 风险
admin closed this issue 2026-05-10 18:59:12 +08:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
admin
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: admin/aiagent#93
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?