Merge branch 'sidv/typescript' of https://github.com/mermaid-js/mermaid into sidv/typescript

* 'sidv/typescript' of https://github.com/mermaid-js/mermaid:
  Update src/config.ts
This commit is contained in:
Sidharth Vinod 2022-08-23 21:35:43 +05:30
commit a8042f622f
No known key found for this signature in database
GPG Key ID: FB5CCD378D3907CD
1 changed files with 1 additions and 1 deletions

View File

@ -151,7 +151,7 @@ export const getConfig = (): MermaidConfig => {
*/
export const sanitize = (options: any) => {
// Checking that options are not in the list of excluded options
siteConfig.secure?.forEach((key) => {
['secure', ...(siteConfig.secure ?? [])].forEach((key) => {
if (typeof options[key] !== 'undefined') {
// DO NOT attempt to print options[key] within `${}` as a malicious script
// can exploit the logger's attempt to stringify the value and execute arbitrary code