dan/Portfolio
1
0
Fork 0
mirror of https://github.com/danbulant/Portfolio synced 2026-06-07 00:30:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: sanitize details before upload

Browse source
This commit is contained in:
EETagent 2022-12-04 15:09:45 +01:00
parent dcbd42d3b4
commit c36b459e58
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
frontend/src/lib/@api/candidate.ts
View file

@ -2,6 +2,7 @@ import axios, { type AxiosProgressEvent } from 'axios';
import type { CandidateData, CandidateLogin } from '$lib/stores/candidate'; import type { CandidateData, CandidateLogin } from '$lib/stores/candidate';
import type { SubmissionProgress } from '$lib/stores/portfolio'; import type { SubmissionProgress } from '$lib/stores/portfolio';
import { API_URL, errorHandler, type Fetch } from '.'; import { API_URL, errorHandler, type Fetch } from '.';
import DOMPurify from 'isomorphic-dompurify';
// SSR Compatible // SSR Compatible
export const apiLogout = async (fetchSsr?: Fetch) => { export const apiLogout = async (fetchSsr?: Fetch) => {
@ -76,7 +77,10 @@ export const apiLogin = async (data: CandidateLogin): Promise<number> => {
}; };
export const apiFillDetails = async (data: CandidateData): Promise<CandidateData> => { export const apiFillDetails = async (data: CandidateData): Promise<CandidateData> => {
console.log(data); Object.keys(data).forEach(key => {
// @ts-ignore
data[key] = DOMPurify.sanitize(data[key]);
});
try { try {
const res = await axios.post(API_URL + '/candidate/details', data, { withCredentials: true }); const res = await axios.post(API_URL + '/candidate/details', data, { withCredentials: true });
return res.data; return res.data;