Release 1.0.2

### Added - Add line break support - Add simple HTML sanitization to JS
ethercreative · Oct 29, 2020 · f6eb4a3 · f6eb4a3
1 parent 94ff920
commit f6eb4a3
Show file tree

Hide file tree

Showing 6 changed files with 9 additions and 13 deletions.
diff --git a/.gitignore b/.gitignore
@@ -28,4 +28,4 @@ vendor
 node_modules
 hot
 mix-manifest.json
-/.idea
+/.idea
diff --git a/.idea/Notes for Craft CMS.iml b/.idea/Notes for Craft CMS.iml
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,8 @@
+## 1.0.2 - 2020-10-29
+### Added
+- Add line break support
+- Add simple HTML sanitization to JS
+
 ## 1.0.1 - 2020-10-16
 - Update license
 

diff --git a/composer.json b/composer.json
@@ -1,7 +1,7 @@
 {
   "name": "ether/notes",
   "description": "A note taking field type for Craft CMS 3",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "type": "craft-plugin",
   "license": "proprietary",
   "minimum-stability": "dev",

diff --git a/src/templates/field.twig b/src/templates/field.twig
@@ -18,7 +18,7 @@
 		{% for note in notes %}
 			<li>
 				<div>
-					<p>{{ note.note }}</p>
+					<p>{{ note.note|nl2br }}</p>
 					<small>{{ note.author }} &bull; {{ note.date }}</small>
 				</div>
 				{% if allowDeleting %}

diff --git a/src/web/notes.js b/src/web/notes.js
@@ -17,7 +17,7 @@ function NotesField ([ns, siteId, elementId, userId, allowDeleting]) {
 			, p = document.createElement('p')
 			, s = document.createElement('small')
 			, a = document.createElement('a');
-		p.textContent = note;
+		p.innerHTML = note.replace(/</g, '&lt;').replace(/\n/g, '<br/>');
 		s.innerHTML = data.meta;
 		d.appendChild(p);
 		d.appendChild(s);
-Original file line number
+Diff line change
@@ Expand Up / @@ -28,4 +28,4 @@ vendor @@
     node_modules
     hot
     mix-manifest.json
-    /.idea
+    /.idea