Wrap CMS content box in v-pre to block Vue template injection

2026-06-13 23:50:24 -04:00
parent c3fd4874bc
commit a54a6fe2de
1 changed files with 4 additions and 1 deletions
@@ -84,7 +84,10 @@
              data-light-src="https://libapps.s3.amazonaws.com/accounts/16298/images/xsmall-2.jpg"
              data-dark-src="https://d2jv02qf7xgjwx.cloudfront.net/accounts/16298/images/Kibbee_library_logo_inverted2.jpg"
            />
-            {{content_box_33471502}}
+            <!-- v-pre: LibGuides injects this content box server-side; this element sits
+                 inside the #app1 Vue root, so v-pre stops Vue from compiling the box's
+                 HTML as a template (prevents client-side template injection). -->
+            <div v-pre>{{content_box_33471502}}</div>
          </div>
          <!-- end of header div -->
        </div>