[FIXED] xss issue

w8tcha · Jul 11, 2023 · a4b154b · a4b154b
1 parent e726a2e
commit a4b154b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 6 deletions.
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "ckeditor-wordcount-plugin",
-  "version": "1.17.11",
+  "version": "1.17.12",
   "author": "w8tcha",
   "description": "WordCount Plugin for CKEditor Editor",
   "repository": {

diff --git a/wordcount/plugin.js b/wordcount/plugin.js
@@ -6,7 +6,7 @@
 CKEDITOR.plugins.add("wordcount",
     {
         lang: "ar,bg,ca,cs,da,de,el,en,es,eu,fa,fi,fr,he,hr,hu,it,ka,ko,ja,nl,no,pl,pt,pt-br,ru,sk,sv,tr,uk,zh-cn,zh,ro", // %REMOVE_LINE_CORE%
-        version: "1.17.11",
+        version: "1.17.12",
         requires: "htmlwriter,notification,undo",
         bbcodePluginLoaded: false,
         onLoad: function() {
@@ -175,13 +175,9 @@ CKEDITOR.plugins.add("wordcount",
                     return html.replace(/\[.*?\]/gi, "");
                 }
 
-                var tmp = document.createElement("div");
-
                 // Add filter before strip
                 html = filter(html);
 
-                tmp.innerHTML = html;
-
                 // Parse filtered HTML, without applying it to any element in DOM
                 var tmp = new DOMParser().parseFromString(html, 'text/html');
                 if (!tmp.body || !tmp.body.textContent) {