ocertat/Kingsborough-LibGuide
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Wrap CMS content box in v-pre to block Vue template injection

Browse Source
This commit is contained in:
Mark Eaton
2026-06-13 23:50:24 -04:00
parent c3fd4874bc
commit a54a6fe2de
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
groups/home/bootstrap5/home1.html
+4 -1
View File
@@ -84,7 +84,10 @@
data-light-src="https://libapps.s3.amazonaws.com/accounts/16298/images/xsmall-2.jpg" data-light-src="https://libapps.s3.amazonaws.com/accounts/16298/images/xsmall-2.jpg"
data-dark-src="https://d2jv02qf7xgjwx.cloudfront.net/accounts/16298/images/Kibbee_library_logo_inverted2.jpg" data-dark-src="https://d2jv02qf7xgjwx.cloudfront.net/accounts/16298/images/Kibbee_library_logo_inverted2.jpg"
/> />
{{content_box_33471502}} <!-- v-pre: LibGuides injects this content box server-side; this element sits
inside the #app1 Vue root, so v-pre stops Vue from compiling the box's
HTML as a template (prevents client-side template injection). -->
<div v-pre>{{content_box_33471502}}</div>
</div> </div>
<!-- end of header div --> <!-- end of header div -->
</div> </div>