Add Entry Preview to World Info Deletion Confirmation Dialog (#5423) * feat: add entry preview to world info deletion confirmation dialog Displays entry comment or first two lines of content in the deletion confirmation popup to help users verify they're deleting the correct entry. * fix: sanitize world info entry preview text in deletion confirmation dialog Adds DOMPurify sanitization to the entry preview text displayed in the deletion confirmation popup to prevent potential XSS vulnerabilities from unsanitized user content. * DOMPurify -> escapeHtml --------- Co-authored-by: Cohee <18619528+Cohee1207@users.noreply.github.com>

5e68410d4eede1fad17f31aa3c202b074b7346e8

Wolfsblvt <wolfsblvt@gmail.com>

Signed

public/scripts/world-info.js+20 -2 Viewed

 import { Fuse } from '../lib.js';
 import { saveSettings, substituteParams, getRequestHeaders, chat_metadata, this_chid, characters, saveCharacterDebounced, menu_type, eventSource, event_types, getExtensionPromptByName, saveMetadata, getCurrentChatId, extension_prompt_roles, create_save, createOrEditCharacter, name1, getOneCharacter, select_selected_character } from '../script.js';
 import { download, debounce, initScrollHeight, resetScrollHeight, parseJsonFile, extractDataFromPng, getFileBuffer, getCharaFilename, getSortableDelay, escapeRegex, PAGINATION_TEMPLATE, navigation_option, waitUntilCondition, isTrueBoolean, setValueByPath, flashHighlight, select2ModifyOptions, getSelect2OptionId, dynamicSelect2DataViaAjax, highlightRegex, select2ChoiceClickSubscribe, isFalseBoolean, getSanitizedFilename, checkOverwriteExistingData, getStringHash, parseStringArray, cancelDebounce, findChar, onlyUnique, equalsIgnoreCaseAndAccents, uuidv4, normalizeArray, getUniqueName, logSlashCommandWarn, addLongPressEvent, escapeHtml } from './utils.js';
 import { extension_settings, getContext } from './extensions.js';
 import { NOTE_MODULE_NAME, metadata_keys, shouldWIAddPrompt } from './authors-note.js';
 import { isMobile } from './RossAscends-mods.js';

         return;
+    }
 -    const confirmation = silent || await Popup.show.confirm(t`Delete the entry with UID: ${uid}?`, t`This action is irreversible!`);
 +    const entry = data.entries[uid];
 +    if (!entry) {
 +        return false;
 +    }
++
 +    let previewText = '';
 +    if (entry.comment && entry.comment.trim()) {
 +        previewText = entry.comment.trim();
 +    } else if (entry.content) {
 +        const lines = entry.content.split(/\r?\n/).filter(line => line.trim());
 +        previewText = lines.slice(0, 2).join('\n');
 +    }
++
 +    const popupHeader = t`Delete world info entry with UID: ${uid}?`;
 +    const popupText = previewText
 +        ? `<strong>${t`Entry`}:</strong><br>${escapeHtml(previewText).replace(/\n/g, '<br>')}<br><br>${t`This action is irreversible!`}`
 +        : t`This action is irreversible!`;
++
 +    const confirmation = silent || await Popup.show.confirm(popupHeader, popupText);
     if (!confirmation) {
         return false;
+    }