@italentjs/italent-header - npm Package Compare versions

Comparing version 1.0.72 to 1.0.75

app/scripts/vendor/components/italent-header/index.js

@@ -276,2 +276,13 @@ /*
 			if (newMsg.reminds.remindList && newMsg.reminds.remindList.length) {
+				// 兼容已转码和非转码两种数据
+				// 若反转后跟正文相同，视为没做转码，强行转码一次
+				// 若反转后跟正文不同，视为转码过，原样输出
+				_.each(newMsg.reminds.remindList, function(item) {
+					if (item.taskContent === _.unescape(item.taskContent)) {
+						item.taskContent = _.escape(item.taskContent);
+					}
+					if (item.teskName === _.unescape(item.teskName)) {
+						item.teskName = _.escape(item.teskName);
+					}
+				});
 				this.listRegion.show(new TodosItems(newMsg))
@@ -820,3 +831,5 @@ } else {
 		reloadMessage: function(newMsg) {
-			this[newMsg.type]["messageRenew"](newMsg)
+			if(this[newMsg.type] && typeof this[newMsg.type]["messageRenew"] === 'function') {
+				this[newMsg.type]["messageRenew"](newMsg);
+			}
 		},
@@ -823,0 +836,0 @@ _checkIEVersion: function() {

app/scripts/views/common/page-regions/header-view.js

@@ -202,2 +202,3 @@ define(["talent", "templates/common", "header"], function(Talent, jst, Header) {
 					],
+					showDot: true
 				}
@@ -265,3 +266,3 @@ },
 								taskContent:
-									"视觉设计验收任务视觉设计验收任务视觉设计验收任务视觉设计验收任务视觉设计验收任务视觉设计验收任务",
+									"<script>alert(1)</script>视觉设计验收任务视觉设计验收任务视觉设计验收任务视觉设计验收任务视觉设计验收任务视觉设计验收任务",
 								href: "#",
@@ -268,0 +269,0 @@ avatar: {

index.js

@@ -276,2 +276,13 @@ /*
 			if (newMsg.reminds.remindList && newMsg.reminds.remindList.length) {
+				// 兼容已转码和非转码两种数据
+				// 若反转后跟正文相同，视为没做转码，强行转码一次
+				// 若反转后跟正文不同，视为转码过，原样输出
+				_.each(newMsg.reminds.remindList, function(item) {
+					if (item.taskContent === _.unescape(item.taskContent)) {
+						item.taskContent = _.escape(item.taskContent);
+					}
+					if (item.teskName === _.unescape(item.teskName)) {
+						item.teskName = _.escape(item.teskName);
+					}
+				});
 				this.listRegion.show(new TodosItems(newMsg))
@@ -820,3 +831,5 @@ } else {
 		reloadMessage: function(newMsg) {
-			this[newMsg.type]["messageRenew"](newMsg)
+			if(this[newMsg.type] && typeof this[newMsg.type]["messageRenew"] === 'function') {
+				this[newMsg.type]["messageRenew"](newMsg);
+			}
 		},
@@ -823,0 +836,0 @@ _checkIEVersion: function() {

package.json

@@ -8,8 +8,7 @@ {
 	"configUser": "ux",
-	"version": "1.0.72",
+	"version": "1.0.75",
 	"scripts": {
 		"build-prod": "rm -rf index.css && rm -rf index.js && grunt build",
 		"auto-publish": "npm run build-prod && git add . && git commit -m 'fix: 修复一些已知问题' && npm version patch && npm publish",
-		"start": "grunt dev",
-		"prepublish": "grunt build"
+		"start": "grunt dev"
 	},
@@ -16,0 +15,0 @@ "dependencies": {

src/scripts/header/header.js

@@ -126,3 +126,5 @@ /** 头部组件入口 **/
 	reloadMessage: function(newMsg) {
-		this[newMsg.type]["messageRenew"](newMsg)
+		if(this[newMsg.type] && typeof this[newMsg.type]["messageRenew"] === 'function') {
+			this[newMsg.type]["messageRenew"](newMsg);
+		}
 	},
@@ -129,0 +131,0 @@ _checkIEVersion: function() {

src/scripts/header/icon-view/todos.js

@@ -38,2 +38,13 @@ var Todos = BaseView.extend({
 		if (newMsg.reminds.remindList && newMsg.reminds.remindList.length) {
+			// 兼容已转码和非转码两种数据
+			// 若反转后跟正文相同，视为没做转码，强行转码一次
+			// 若反转后跟正文不同，视为转码过，原样输出
+			_.each(newMsg.reminds.remindList, function(item) {
+				if (item.taskContent === _.unescape(item.taskContent)) {
+					item.taskContent = _.escape(item.taskContent);
+				}
+				if (item.teskName === _.unescape(item.teskName)) {
+					item.teskName = _.escape(item.teskName);
+				}
+			});
 			this.listRegion.show(new TodosItems(newMsg))
@@ -40,0 +51,0 @@ } else {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No License Found

License

(Experimental) License information could not be found.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 10 instances in 1 package

Misc. License Issues

License

(Experimental) A package's licensing information has fine-grained problems.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Number of medium license alerts

0

decreased by-100%

Number of low supply chain risk alerts

5

decreased by-75%

Number of medium supply chain risk alerts

1

decreased by-93.33%

Worsened metrics

Total package byte prevSize

2173345

decreased by-80.4%

Number of package files

212

decreased by-52.36%

Number of low license alerts

1

increased byInfinity%

Lines of code

10898

decreased by-85.71%

No dependency changes