refac: apply DOMPurify to excel and office HTML render assignments (#24468)

2026-05-09 05:10:31 +09:00
parent 7eeff2fdf9
commit 3746339cfc
2 changed files with 5 additions and 3 deletions
@@ -161,7 +161,7 @@
 		const { excelToTable } = await import('$lib/utils/excelToTable');
 		const worksheet = excelWorkbook.Sheets[selectedSheet];
 		const result = await excelToTable(worksheet);
-		excelHtml = result.html;
+		excelHtml = DOMPurify.sanitize(result.html);
 		rowCount = result.rowCount;
 	};