update: 调整消息弹框innerhtml

src/components/app-alert/app-alert.vue

@@ -24,6 +24,7 @@
 <script lang="ts">
 import {Vue, Component, Prop} from 'vue-property-decorator';
 import ViewMessageService from '@/message/view-message-service';
+import { safeXss } from '@/utils/xss-util/xss-util';
 
 @Component({})
 export default class AppAlert extends Vue {
@@ -177,11 +178,12 @@ export default class AppAlert extends Vue {
                 data.showState = false;
                 if(Object.is('HTML',data.messageType) && data.hasMessageTemp) {
                     setTimeout(() => {
+                        const content = safeXss(data.content);
                         this.$message({
                             customClass: data.codename+","+data.closeMode,
                             message: h('div',{}, [
                                 h('p',data.title),
-                                h('p',{domProps:{innerHTML: data.content}})
+                                h('p',{domProps:{innerHTML: content}})
                             ]), 
                             type: data.type,
                             showClose: data.closable,