Skip to content

Commit dfc1190

Browse files
shhnjkJun Kokatsu
and
Jun Kokatsu
authored
Fix #1575: Create Trusted Type policy for assigning an HTML in detectElementResize.js (#1614)
* Create Trusted Type policy for assigning an HTML Co-authored-by: Jun Kokatsu <Jun.Kokatsu@microsoft.com>
1 parent ff2e15c commit dfc1190

File tree

1 file changed

+10
-1
lines changed

1 file changed

+10
-1
lines changed

source/vendor/detectElementResize.js

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -182,9 +182,18 @@ export default function createDetectElementResize(nonce, hostWindow) {
182182
element.__resizeListeners__ = [];
183183
(element.__resizeTriggers__ = doc.createElement('div')).className =
184184
'resize-triggers';
185-
element.__resizeTriggers__.innerHTML =
185+
var resizeTriggersHtml =
186186
'<div class="expand-trigger"><div></div></div>' +
187187
'<div class="contract-trigger"></div>';
188+
if (window.trustedTypes) {
189+
var staticPolicy = trustedTypes.createPolicy(
190+
'react-virtualized-auto-sizer',
191+
{createHTML: () => resizeTriggersHtml},
192+
);
193+
element.__resizeTriggers__.innerHTML = staticPolicy.createHTML('');
194+
} else {
195+
element.__resizeTriggers__.innerHTML = resizeTriggersHtml;
196+
}
188197
element.appendChild(element.__resizeTriggers__);
189198
resetTriggers(element);
190199
element.addEventListener('scroll', scrollListener, true);

0 commit comments

Comments
 (0)