description text - add line feed?

[oldfart101]

as the title says is there a way to insert a CR or LF in the description text

[Lissy93]

That's not possible, sorry.

[Lissy93]

In Item.vue, if you changed:

<p class="description">{{ description }}</p>

to:

<p class="description" v-html="description" />

Then this would allow you to render any HTML characters here, including <br> for new lines. But would also need to be taken care of to prevent introduction of an XSS vulnerability. So that would be up to you.

[oldfart101]

thanks for the reply
?? XSS vulnerability ??

[Lissy93]

XXS stands for Cross-Site Scripting, and it's when malicious scripts are injected into trusted websites.

So in this example, if we used v-html here, the page would render whatever was passed into the description tag. Attackers can use this to render whatever they like, including malicious code (usually by injecting a <script> tag).

There is a way around this, and that it to sanitize the users input, say strip out all tags except for a list of pre-defined allowed tags (maybe like <br>, <p>, <b>, <i>, etc), but that adds a lot of complexity for a simple task, and complexity also makes testing harder.

I will have a think about whether it's worth trying to implement this, and will update you here if anything changes :)