Previewers: Fixed XSS (#2506)

PrismJS · Aug 6, 2020 · 8bba488 · 8bba488
1 parent 158caf5
commit 8bba488
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/plugins/previewers/prism-previewers.js b/plugins/previewers/prism-previewers.js
@@ -353,8 +353,8 @@
 						'</marker>' +
 						'</defs>' +
 						'<path d="M0,100 C20,50, 40,30, 100,0" />' +
-						'<line x1="0" y1="100" x2="20" y2="50" marker-start="url(' + location.href + '#prism-previewer-easing-marker)" marker-end="url(' + location.href + '#prism-previewer-easing-marker)" />' +
-						'<line x1="100" y1="0" x2="40" y2="30" marker-start="url(' + location.href + '#prism-previewer-easing-marker)" marker-end="url(' + location.href + '#prism-previewer-easing-marker)" />' +
+						'<line x1="0" y1="100" x2="20" y2="50" marker-start="url(#prism-previewer-easing-marker)" marker-end="url(#prism-previewer-easing-marker)" />' +
+						'<line x1="100" y1="0" x2="40" y2="30" marker-start="url(#prism-previewer-easing-marker)" marker-end="url(#prism-previewer-easing-marker)" />' +
 						'</svg>';
 				});
 			},