Cross-Site Scripting in wangeditor

编译时，报错如下
wangeditor  *
Severity: high
Cross-Site Scripting in wangeditor - https://github.com/advisories/GHSA-g7mw-5cq6-fv82
No fix available
node_modules/wangeditor

1 high severity vulnerability

Some issues need review, and may require choosing
a different dependency.

运行时报错，如下
node:events:491
      throw er; // Unhandled 'error' event
      ^

Error: spawn xdg-open ENOENT
    at Process.ChildProcess._handle.onexit (node:internal/child_process:285:19)
    at onErrorNT (node:internal/child_process:485:16)
    at processTicksAndRejections (node:internal/process/task_queues:83:21)
Emitted 'error' event on ChildProcess instance at:
    at Process.ChildProcess._handle.onexit (node:internal/child_process:291:12)
    at onErrorNT (node:internal/child_process:485:16)
    at processTicksAndRejections (node:internal/process/task_queues:83:21) {
  errno: -2,
  code: 'ENOENT',
  syscall: 'spawn xdg-open',
  path: 'xdg-open',
  spawnargs: [ 'http://localhost:8888/' ]
}

依赖也都下载下来了，部分依赖如下：
[root@dev node_modules]# npm list
vue-next-admin@2.0.2 /opt/modules/sagooiot-ui
├── @antv/g2plot@2.4.20
├── @element-plus/icons-vue@2.0.9
├── @types/node@17.0.45
├── @types/nprogress@0.2.0
├── @types/sortablejs@1.13.0
├── @typescript-eslint/eslint-plugin@5.33.0
├── @typescript-eslint/parser@5.33.0
├── @vitejs/plugin-vue@2.3.4
├── @vue/compiler-sfc@3.2.37
├── @wangeditor/editor-for-vue@5.1.12
├── @wangeditor/editor@5.1.23
├── axios@0.26.1
├── clipboard@2.0.11

sagoo/sagooiot-ui

内容风险标识

评论 (0)

sagoo/sagooiot-ui .gitee-modal { width: 500px !important; }

内容风险标识