Fix errors, bugs and known vulerabilities

2026-03-23 06:58:41 +01:00
parent 0308ea32ec
commit 567fb4f746
15 changed files with 84 additions and 52 deletions
@@ -61,9 +61,11 @@ export default async function genWebHTML({
        html += `        <link rel="stylesheet" href="/${bundledMap.css_path}" />\n`;
    }

-    html += `        <script>window.${ClientWindowPagePropsName} = ${
-        EJSON.stringify(pageProps || {}) || "{}"
-    }</script>\n`;
+    const serializedProps = (EJSON.stringify(pageProps || {}) || "{}").replace(
+        /<\//g,
+        "<\\/",
+    );
+    html += `        <script>window.${ClientWindowPagePropsName} = ${serializedProps}</script>\n`;

    if (bundledMap?.path) {
        const dev = isDevelopment();