summaryrefslogtreecommitdiff
path: root/packages/frontend-embed/src
diff options
context:
space:
mode:
authorかっこかり <67428053+kakkokari-gtyih@users.noreply.github.com>2024-10-26 22:07:26 +0900
committerGitHub <noreply@github.com>2024-10-26 22:07:26 +0900
commita6a1e3d733e192504986e6e91b5aca9211c331ce (patch)
treee01a6b477b390449cdfdd91cf28611a235af5841 /packages/frontend-embed/src
parentBump version to 2024.10.2-alpha.1 (diff)
downloadsharkey-a6a1e3d733e192504986e6e91b5aca9211c331ce.tar.gz
sharkey-a6a1e3d733e192504986e6e91b5aca9211c331ce.tar.bz2
sharkey-a6a1e3d733e192504986e6e91b5aca9211c331ce.zip
enhance(frontend): Self-XSS防止用のメッセージを追加 (#14839)
* enhance(frontend): Self-XSS防止用のメッセージを追加 * Update Changelog * embedにも同様の記述を追加
Diffstat (limited to 'packages/frontend-embed/src')
-rw-r--r--packages/frontend-embed/src/boot.ts22
1 files changed, 22 insertions, 0 deletions
diff --git a/packages/frontend-embed/src/boot.ts b/packages/frontend-embed/src/boot.ts
index 00c7944eb3..8ab4ab32e6 100644
--- a/packages/frontend-embed/src/boot.ts
+++ b/packages/frontend-embed/src/boot.ts
@@ -21,6 +21,7 @@ import { url } from '@@/js/config.js';
import { parseEmbedParams } from '@@/js/embed-page.js';
import { postMessageToParentWindow, setIframeId } from '@/post-message.js';
import { serverContext } from '@/server-context.js';
+import { i18n } from '@/i18n.js';
import type { Theme } from '@/theme.js';
@@ -127,6 +128,27 @@ window.onunhandledrejection = null;
removeSplash();
+//#region Self-XSS 対策メッセージ
+console.log(
+ `%c${i18n.ts._selfXssPrevention.warning}`,
+ 'color: #f00; background-color: #ff0; font-size: 36px; padding: 4px;',
+);
+console.log(
+ `%c${i18n.ts._selfXssPrevention.title}`,
+ 'color: #f00; font-weight: 900; font-family: "Hiragino Sans W9", "Hiragino Kaku Gothic ProN", sans-serif; font-size: 24px;',
+);
+console.log(
+ `%c${i18n.ts._selfXssPrevention.description1}`,
+ 'font-size: 16px; font-weight: 700;',
+);
+console.log(
+ `%c${i18n.ts._selfXssPrevention.description2}`,
+ 'font-size: 16px;',
+ 'font-size: 20px; font-weight: 700; color: #f00;',
+);
+console.log(i18n.tsx._selfXssPrevention.description3({ link: 'https://misskey-hub.net/docs/for-users/resources/self-xss/' }));
+//#endregion
+
function removeSplash() {
const splash = document.getElementById('splash');
if (splash) {