forked from
npmx.dev/npmx.dev
[READ-ONLY]
a fast, modern browser for the npm registry
fix: do not use `v-html` on a custom component
+9
-6
+7
-4
app/components/Readme.vue
+7
-4
app/components/Readme.vue
···
1
-
<!-- simple component only taking slot -->
1
+
<script setup lang="ts">
2
+
defineProps<{
3
+
html: string
4
+
}>()
5
+
</script>
6
+
2
7
<template>
3
-
<article class="readme prose prose-invert max-w-[70ch]">
4
-
<slot />
5
-
</article>
8
+
<article class="readme prose prose-invert max-w-[70ch]" v-html="html" />
6
9
</template>
7
10
8
11
<style scoped>
+1
-1
app/pages/[...package].vue
+1
-1
app/pages/[...package].vue
···
954
954
</a>
955
955
</h2>
956
956
<!-- eslint-disable vue/no-v-html -- HTML is sanitized server-side -->
957
-
<Readme v-if="readmeData?.html" v-html="readmeData.html" @click="handleClick" />
957
+
<Readme v-if="readmeData?.html" :html="readmeData.html" @click="handleClick" />
958
958
<p v-else class="text-fg-subtle italic">
959
959
{{ $t('package.readme.no_readme') }}
960
960
<a v-if="repositoryUrl" :href="repositoryUrl" rel="noopener noreferrer" class="link">{{