/popup allow header arg, with sanitization

e4e10c3d6b3ab8ab02844bc7c01fca6f4912f007

Wolfsblvt <wolfsblvt@gmail.com>

public/scripts/slash-commands.js+4 -2 Viewed

+}
 async function popupCallback(args, value) {
-    const safeValue = DOMPurify.sanitize(value || '');
+    const safeBody = DOMPurify.sanitize(value || '');
+    const safeHeader = args?.header && typeof args?.header === 'string' ? DOMPurify.sanitize(args.header) : null;
     /** @type {import('./popup.js').PopupOptions} */
     const popupOptions = {
         large: isTrueBoolean(args?.large),

         okButton: args?.okButton !== undefined && typeof args?.okButton === 'string' ? args.okButton : 'Ok',
         cancelButton: args?.cancelButton !== undefined && typeof args?.cancelButton === 'string' ? args.cancelButton : null,
     };
-    await callGenericPopup(safeValue, POPUP_TYPE.TEXT, '', popupOptions);
+    await Popup.show.text(safeHeader, safeBody, popupOptions);
     return String(value);
+}