/popup allow header arg, with sanitization

e4e10c3d6b3ab8ab02844bc7c01fca6f4912f007

Wolfsblvt <wolfsblvt@gmail.com>

public/scripts/slash-commands.js+4 -2 Viewed

+}
 async function popupCallback(args, value) {
     const safeValuesafeBody = DOMPurify.sanitize(value || '');
 +    const safeHeader = args?.header && typeof args?.header === 'string' ? DOMPurify.sanitize(args.header) : null;
++
     /** @type {import('./popup.js').PopupOptions} */
     const popupOptions = {
         large: isTrueBoolean(args?.large),

         okButton: args?.okButton !== undefined && typeof args?.okButton === 'string' ? args.okButton : 'Ok',
         cancelButton: args?.cancelButton !== undefined && typeof args?.cancelButton === 'string' ? args.cancelButton : null,
     };
     await callGenericPopup(safeValue, POPUP_TYPEPopup.TEXTshow.text(safeHeader, ''safeBody, popupOptions);
     return String(value);
+}