rixty/SillyTavern
1
0
Fork 0
mirror of https://github.com/SillyTavern/SillyTavern.git synced 2025-06-05 21:59:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Concatenate strings in /addvar

Browse Source
This commit is contained in:
Cohee
2023-11-25 17:45:40 +02:00
parent 389c2b5435
commit 06ade803fa
2 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
public/scripts/slash-commands.js
View File

@ -264,7 +264,8 @@ async function delayCallback(_, amount) {
async function inputCallback(_, prompt) {
// Do not remove this delay, otherwise the prompt will not show up
await delay(1);
const result = await callPopup(prompt || '', 'input');
const safeValue = DOMPurify.sanitize(prompt || '');
const result = await callPopup(safeValue, 'input');
await delay(1);
return result || '';
}