profile
viewpoint
Jinjiang Jinjiang Singapore Everyday is a new start!

Jinjiang/h5slides 861

A Slides App based on HTML5

Jinjiang/code-review-front-end 39

Code Review Checklist for Front-End Developers

Jinjiang/html5-slides-20110512 14

如何制作简易的HTML5幻灯片

Jinjiang/996.band 12

Homepage of 996 Band

Jinjiang/jie 6

基于 Polymer 的一套组件库,开发代号暂定为 JIE

Jinjiang/grunt-combo-html-css-js 5

Combine css links and javscript files to html file with inline tags automatically

Hanks10100/weex 2

A framework for building Mobile cross-platform UI

Jinjiang/buble-loader 2

Webpack loader that compiles ES2015 features using buble

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha bb1b4b808a0b7ffd5162f9456f03c1235da7c9b0

generated docs

view details

push time in 12 days

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 4edf357a90cb7ad169024e1d3e50589a0b204668

fixed small typos

view details

push time in 12 days

push eventJinjiang/zhlint

Jinjiang

commit sha 3dc965049da613f2fe1ee0a291a7c2440b48f5bb

zh-lint -> zhlint

view details

Jinjiang

commit sha bff2d5001cf16e1c3c07906d0343f9450cbc44a9

supported bin zhlint

view details

push time in 12 days

push eventJinjiang/zh-lint

Jinjiang

commit sha b46bfa61aed5d89b6849281df2b388a4ab1a8ecf

updated README

view details

push time in 13 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 07429f90037e26010a2c9a4188c6c4c37ae09046

fixed ignoredCases argument

view details

push time in 13 days

delete branch Jinjiang/zh-lint

delete branch : ignore

delete time in 13 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 70c6cfb3422322ddcde0ef6c9212e84366ae790f

added a dummy argument ignoredCases

view details

Jinjiang

commit sha 7891acdf4fd3e2fd4e04a349f8e17c7904f8b7b6

rearranged source code into separated files

view details

Jinjiang

commit sha df72a2a1e9a71abcd423efa8ddbaf02ee8393b95

improved char type checking

view details

Jinjiang

commit sha 764b65671052f92bcfa521bf8ad81abc839b3869

supported string[] argument for rules

view details

Jinjiang

commit sha 83e57264a745ae26bc06f7271c4e30fbe473940c

supported ignoredCases

view details

push time in 13 days

create barnchJinjiang/zh-lint

branch : ignore

created branch time in 13 days

push eventJinjiang/zh-lint

Jinjiang

commit sha f976eea1988ead4752a14b6c2bd6911078120033

improved case: datatime zh

view details

Jinjiang

commit sha 7dd0a43e0f5745e01029387ee4e7c3cda7d67cba

supported math exp case

view details

push time in 14 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 670913de2fc275a0308d214d2715fca1e81f726e

fixed single quote shorthand case

view details

push time in 14 days

push eventJinjiang/zh-lint

Jinjiang

commit sha c8e07e8234eb9ccc0cd63f17e7c2164ac57a90a3

added Chinese datetime case rule

view details

Jinjiang

commit sha 2f1696ee6b47afe9648cc7b2fe35fdd44f1a027f

rearranged test cases

view details

Jinjiang

commit sha 10d495dd6f6898f70b0cb744291e214017e04c82

removed plural case rule because unnecessary

view details

push time in 14 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 82c4a144e84d84c71f3900eaf6ca6b64ec8348a0

fixed empty lines bug

view details

Jinjiang

commit sha d4d87354db67774a2be25449bc013619fa3efb2c

fixed html tags bug

view details

Jinjiang

commit sha b34ef19aaf681d51854185e87ec03db7dcfe4c32

fixed code html tags bug

view details

Jinjiang

commit sha cff907b60d6b94d768d4aaa23136349902ca9633

passed more test cases

view details

Jinjiang

commit sha 5836a6dae40118cb33c745d53a01d154ca876e26

fixed markdown example and html tags regexp

view details

push time in 15 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 1fb296ad8ab7262c4d8339bd14ee2c97da2bb421

fixed test case: dots in URL 3

view details

push time in 15 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 942625742b37b64990deb5bbdf3f640826e6cc2d

fixed a crash bug in utils

view details

push time in 16 days

push eventJinjiang/zh-lint

Jinjiang

commit sha e1e311e5296c9d1828eae64ce89723c7dac860b0

fixed a part of bugs for space beside html tags

view details

push time in 16 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 014682b490f15fb6a50280e7cef12ac700dd74b0

supported unknown characters

view details

Jinjiang

commit sha ce5cb80e22e7f60fc689bfbc655c94e1a2275dac

fixed slash char bug

view details

Jinjiang

commit sha 12cea6a2a83f9721fa4b6df8fda26cd92cb20b2f

fixed dot in URL bug

view details

Jinjiang

commit sha 875f2c4cd5fb9fb767152b96ad584c1e3409b377

updated test cases

view details

push time in 16 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 6f2a3e25643940f7466b57f16b92a4559f476b51

added more todo cases

view details

push time in 16 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 431118621138aab616b91b19c5ff25c05473a800

fixed one-off char bug of markdown lint

view details

Jinjiang

commit sha 7adf73ca261f5ef7b84395b889ce88fe6e40707e

reorganized markdown tests

view details

Jinjiang

commit sha 955b14acf75864e695763ef13d20e243015247a8

supported parsing frontmatter in markdown

view details

push time in 16 days

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 3ef76aca726f70e43042a449ee83ca39b9d5f45e

generated docs

view details

push time in 16 days

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 368f4535cbaa09a558dd506f202bba3839e313fe

generated docs

view details

push time in 17 days

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha a93aef4e15d28f90ba0205142926c4026caafd5c

generated docs

view details

push time in 18 days

push eventJinjiang/zh-lint

Jinjiang

commit sha a11fddeb57d103bf630aff5b4a7507094b909544

added a real project case

view details

push time in 18 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 3a486e32be1fe07abcfc8313378684f67d630ee3

fixed test case for special cases

view details

push time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 78d54c450c3996d8caeb7302edbd9ffa1b1628e8

supported multi-block input

view details

push time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 4b1ecf0283c80967322687d252e0c9aa323bac70

updated gitignore to ignore jest crash report

view details

Jinjiang

commit sha ccea52e8175c846daeef655e49ca0b39a3c0feb9

updated parser to identify hyper content marks

view details

Jinjiang

commit sha fba389d6219706da9aef6af79227cdbcbc147149

added marks rules

view details

Jinjiang

commit sha a6c6525eae35460f2850d79a11fea921159c04ca

supported brackets with hyper marks

view details

Jinjiang

commit sha 752babe2a5a42c10ebf19b1c6f8808e903e48cc7

fixed multi-hypermark cases

view details

Jinjiang

commit sha fd0cc5ea0bd5b24ad88f2fd659ca68ed01dee2d3

added findMarkSeq into rules/util

view details

Jinjiang

commit sha 1287a4b5a642b9bf81f2969b57c830d72117699d

supported full-width-content with hyper marks

view details

Jinjiang

commit sha f518313d6ebb33b42b04169392b8e081ec02854b

supported punctuation with hyper marks

view details

Jinjiang

commit sha 6c417c3c11d42c5172f26710880a1045dc810dd5

removed unnecessary todos

view details

Jinjiang

commit sha 3ad9a9640d37d0c75491bbf05e9f56620bf51174

supported quotes with hyper marks

view details

Jinjiang

commit sha 11037aa7c4a48dd4cd340a4b44536f12d40cb5ef

start/end Char -> start/end Content

view details

push time in 19 days

delete branch Jinjiang/zh-lint

delete branch : marks

delete time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 11037aa7c4a48dd4cd340a4b44536f12d40cb5ef

start/end Char -> start/end Content

view details

push time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 6c417c3c11d42c5172f26710880a1045dc810dd5

removed unnecessary todos

view details

Jinjiang

commit sha 3ad9a9640d37d0c75491bbf05e9f56620bf51174

supported quotes with hyper marks

view details

push time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha f518313d6ebb33b42b04169392b8e081ec02854b

supported punctuation with hyper marks

view details

push time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 1287a4b5a642b9bf81f2969b57c830d72117699d

supported full-width-content with hyper marks

view details

push time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha fd0cc5ea0bd5b24ad88f2fd659ca68ed01dee2d3

added findMarkSeq into rules/util

view details

push time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 752babe2a5a42c10ebf19b1c6f8808e903e48cc7

fixed multi-hypermark cases

view details

push time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha a6c6525eae35460f2850d79a11fea921159c04ca

supported brackets with hyper marks

view details

push time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha fba389d6219706da9aef6af79227cdbcbc147149

added marks rules

view details

push time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha ccea52e8175c846daeef655e49ca0b39a3c0feb9

updated parser to identify hyper content marks

view details

push time in 19 days

create barnchJinjiang/zh-lint

branch : marks

created branch time in 19 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 5177a6622a705de842c8e62b7ac390dc741e904c

added md parser as the default pre parser

view details

push time in 21 days

push eventJinjiang/zh-lint

Jinjiang

commit sha ec45d1f8ab1ca8acf19db6daf87414855eab0243

added md parser as the default pre parser

view details

push time in 21 days

delete branch Jinjiang/zh-lint

delete branch : options

delete time in 21 days

create barnchJinjiang/zh-lint

branch : legacy-options

created branch time in 21 days

delete branch Jinjiang/zh-lint

delete branch : next

delete time in 21 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 14e2591d40131eb9d5f064f92d4c9e6c11f0f106

supported checkCharType

view details

Jinjiang

commit sha 0668b71249cb3a7b7d0c9d83413da255a268b4e7

supported parse

view details

Jinjiang

commit sha 72a3a8d70c7c370fa9eab3934877433b644ee66c

supported travel

view details

Jinjiang

commit sha 4f8b52591fb7cf292b803574ffafaa22f65cbb17

supported join

view details

Jinjiang

commit sha 3d9d1f45a7f9498a1ab374751a074acff3b96ce1

supported processRule

view details

Jinjiang

commit sha 1b757de792c0c91bbe24659696dea92e9f5c69f4

added lint(str) and initialized some rules

view details

Jinjiang

commit sha 105f9cf5b6603de8a670978bdfeea4680c16d2f4

supported fixing space between half-width content and full-width content

view details

Jinjiang

commit sha 0fa81a7b46b10af1d8be10639da3f5e0ad553b72

added some comments for unfinished rules

view details

Jinjiang

commit sha b43e47de421a6182416f87307c901bcae8a55f2e

supported fixing space besides brackets

view details

Jinjiang

commit sha a40378c42e2536a27226aca6cc4db9144090757d

supported fixing full-width/half-width mixed punctuation usage

view details

Jinjiang

commit sha ef53cd36b8cfe0ccce88205556e1ac62fd4d7830

added raw data into the after-parsed data structure

view details

Jinjiang

commit sha eab9d772b956f6d939db48cb88ae34f1a52793ef

supported fixing space beside punctuations

view details

Jinjiang

commit sha fb7d425f7c51c034438fe10965612041a71e1ae5

supported fixing space besides quotes

view details

Jinjiang

commit sha a126a761ea269966b1e00d895c6ca50eee44a1f3

supported replacing traditional characters

view details

Jinjiang

commit sha 1b11da37661ee76eec05dbcb7dfaffdfd024d8a2

punctuation-mark -> mark-brackets

view details

Jinjiang

commit sha 9a4392eacdb5ab110eceffc9705f3cbc5ac0d68b

updated main file path

view details

Jinjiang

commit sha fa3caca43467d7e45248748ee90e6b2299a35249

refined the logic about parsing brackets

view details

Jinjiang

commit sha ab007821322e187ba151fa6b58d57f8037c9c505

supported hyper marks parsing

view details

Jinjiang

commit sha 8d30fc4058c13b2fa491353b9230635b316ca171

supported 3rd argument: hyperParse()

view details

Jinjiang

commit sha 3257a10121dcf2a4f50ba9b79b4c0ec6bb88b2a7

updated type defs in code comment

view details

push time in 21 days

create barnchJinjiang/zh-lint

branch : legacy

created branch time in 21 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 3257a10121dcf2a4f50ba9b79b4c0ec6bb88b2a7

updated type defs in code comment

view details

Jinjiang

commit sha 638d771c927cc231ce9e95118ac67154dd7a6079

added markdown preparser

view details

Jinjiang

commit sha 41a0a04af338ff6d75cd4da13c5330cd643a1c78

refined more todos as code comments

view details

push time in 21 days

push eventJinjiang/zh-lint

Jinjiang

commit sha ab007821322e187ba151fa6b58d57f8037c9c505

supported hyper marks parsing

view details

Jinjiang

commit sha 8d30fc4058c13b2fa491353b9230635b316ca171

supported 3rd argument: hyperParse()

view details

push time in 25 days

push eventJinjiang/zh-lint

Jinjiang

commit sha fa3caca43467d7e45248748ee90e6b2299a35249

refined the logic about parsing brackets

view details

push time in 25 days

push eventJinjiang/zh-lint

Jinjiang

commit sha 1b11da37661ee76eec05dbcb7dfaffdfd024d8a2

punctuation-mark -> mark-brackets

view details

Jinjiang

commit sha 9a4392eacdb5ab110eceffc9705f3cbc5ac0d68b

updated main file path

view details

push time in 25 days

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 7a16346f0bc6a76cfe58085023d601debefdae79

generated docs

view details

push time in a month

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 2efcd8efb70eb447bffb2430199680e071c1ec2a

generated docs

view details

push time in a month

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha c25a7663e6b0122a3b2230d68f19e2d106c7c6dd

generated docs

view details

push time in a month

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha c99df37bd3d7d7e7017840d52755a03e68c3e10c

generated docs

view details

push time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha fb66a30576cfd3ae7533463c14572c928d959787

generated docs

view details

push time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha b335d0faf7868cd70fcad646dc0d870b8892b8d4

generated docs

view details

push time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 3cbe208d661947a620725adf1fc5eace3a4fea5c

generated docs

view details

push time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 7805efba4db7cecf73c84d5a208a7e5505ec7950

generated docs

view details

push time in 2 months

delete branch vuejs/cn.vuejs.org

delete branch : update

delete time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 9f0ef96969ed16db652a01ccb96aa4b834fc56a2

Update (#1042) * updated from afe7421c to 34df294b * translated new part in components.md * translated 1st half of security.md * translated 2nd half of security.md * kept writing-guide.md original * Update components.md * Update security.md * Apply suggestions from code review Co-Authored-By: GU Yiling <justice360@gmail.com> * Update security.md * Apply suggestions from code review Co-Authored-By: GU Yiling <justice360@gmail.com> * Update security.md Co-authored-by: GU Yiling <justice360@gmail.com>

view details

push time in 2 months

PR merged vuejs/cn.vuejs.org

Update

Ref: https://github.com/vuejs/vuejs.org/compare/afe7421c...34df294b And merry Christmas.

+469 -47

0 comment

34 changed files

Jinjiang

pr closed time in 2 months

Pull request review commentvuejs/cn.vuejs.org

Update

+---+title: 安全+type: guide+order: 504+---++## 报告安全漏洞++当一个安全漏洞被报告时,它会立即成为我们的最高顾虑,并由全职贡献者停下手中的工作处理此事。如发现任何安全漏洞,请邮件给 [vuejs.org@gmail.com](mailto:vuejs.org@gmail.com)。++虽然发现新安全漏洞是比较罕见的事,我们仍推荐始终使用最新版本的 Vue 及其官方的周边库,以确保应用始终尽可能安全。++## Vue 保护你的方式++### HTML 内容++不论使用模板还是渲染函数,内容都会被自动转义。也就是说对于这份模板:++```html+<h1>{{ userProvidedString }}</h1>+```++如果 `userProvidedString` 包含了:++```js+'<script>alert("hi")</script>'+```++则它会被转义成为如下 HTML:++```html+&lt;script&gt;alert(&quot;hi&quot;)&lt;/script&gt;+```++因此避免了脚本注入。该转义通过诸如 `textContent` 的浏览器原生的 API 完成,所以除非浏览器本身存在安全漏洞,否则不会存在安全漏洞。++### Attribute 绑定++同样地,动态 attribute 绑定也会自动被转义。也就是说对于这份模板:++```html+<h1 v-bind:title="userProvidedString">+  hello+</h1>+```++如果 `userProvidedString` 包含了:++```js+'" onclick="alert(\'hi\')'+```++则它会被转义成为如下 HTML:++```html+&quot; onclick=&quot;alert('hi')+```++因此避免了通过闭合 `title` attribute 而注入新的任意 HTML。该转义通过诸如 `setAttribute` 的浏览器原生的 API 完成,所以除非浏览器本身存在安全漏洞,否则不会存在安全漏洞。++## 潜在的危险++在任何 web 应用中,允许未清洁的用户提供的内容成为 HTML、CSS 或 JavaScript 都有潜在的危险。因此应该避免所有的可能。尽管如此,有些情况下的风险是可接受的。

经过讨论,最终决定用“过滤”

Jinjiang

comment created time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha a03da67287c2bca3b9c9fef294fce2b0f45375b0

Update security.md

view details

push time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha b9686b7ff00dc45f7a7921a446425f77ae37f4bf

Apply suggestions from code review Co-Authored-By: GU Yiling <justice360@gmail.com>

view details

push time in 2 months

Pull request review commentvuejs/cn.vuejs.org

Update

+---+title: 安全+type: guide+order: 504+---++## 报告安全漏洞++当一个安全漏洞被报告时,它会立即成为我们的最高顾虑,并由全职贡献者停下手中的工作处理此事。如发现任何安全漏洞,请邮件给 [vuejs.org@gmail.com](mailto:vuejs.org@gmail.com)。++虽然发现新安全漏洞是比较罕见的事,我们仍推荐始终使用最新版本的 Vue 及其官方的周边库,以确保应用始终尽可能安全。++## Vue 保护你的方式++### HTML 内容++不论使用模板还是渲染函数,内容都会被自动转义。也就是说对于这份模板:++```html+<h1>{{ userProvidedString }}</h1>+```++如果 `userProvidedString` 包含了:++```js+'<script>alert("hi")</script>'+```++则它会被转义成为如下 HTML:++```html+&lt;script&gt;alert(&quot;hi&quot;)&lt;/script&gt;+```++因此避免了脚本注入。该转义通过诸如 `textContent` 的浏览器原生的 API 完成,所以除非浏览器本身存在安全漏洞,否则不会存在安全漏洞。++### Attribute 绑定++同样地,动态 attribute 绑定也会自动被转义。也就是说对于这份模板:++```html+<h1 v-bind:title="userProvidedString">+  hello+</h1>+```++如果 `userProvidedString` 包含了:++```js+'" onclick="alert(\'hi\')'+```++则它会被转义成为如下 HTML:++```html+&quot; onclick=&quot;alert('hi')+```++因此避免了通过闭合 `title` attribute 而注入新的任意 HTML。该转义通过诸如 `setAttribute` 的浏览器原生的 API 完成,所以除非浏览器本身存在安全漏洞,否则不会存在安全漏洞。++## 潜在的危险++在任何 web 应用中,允许未清洁的用户提供的内容成为 HTML、CSS 或 JavaScript 都有潜在的危险。因此应该避免所有的可能。尽管如此,有些情况下的风险是可接受的。

我暂时把你提到的两处清洁改成了净化,但其它几处都还没改,觉得有点纠结

Jinjiang

comment created time in 2 months

Pull request review commentvuejs/cn.vuejs.org

Update

+---+title: 安全+type: guide+order: 504+---++## 报告安全漏洞++当一个安全漏洞被报告时,它会立即成为我们的最高顾虑,并由全职贡献者停下手中的工作处理此事。如发现任何安全漏洞,请邮件给 [vuejs.org@gmail.com](mailto:vuejs.org@gmail.com)。++虽然发现新安全漏洞是比较罕见的事,我们仍推荐始终使用最新版本的 Vue 及其官方的周边库,以确保应用始终尽可能安全。++## Vue 保护你的方式++### HTML 内容++不论使用模板还是渲染函数,内容都会被自动转义。也就是说对于这份模板:++```html+<h1>{{ userProvidedString }}</h1>+```++如果 `userProvidedString` 包含了:++```js+'<script>alert("hi")</script>'+```++则它会被转义成为如下 HTML:++```html+&lt;script&gt;alert(&quot;hi&quot;)&lt;/script&gt;+```++因此避免了脚本注入。该转义通过诸如 `textContent` 的浏览器原生的 API 完成,所以除非浏览器本身存在安全漏洞,否则不会存在安全漏洞。++### Attribute 绑定++同样地,动态 attribute 绑定也会自动被转义。也就是说对于这份模板:++```html+<h1 v-bind:title="userProvidedString">+  hello+</h1>+```++如果 `userProvidedString` 包含了:++```js+'" onclick="alert(\'hi\')'+```++则它会被转义成为如下 HTML:++```html+&quot; onclick=&quot;alert('hi')+```++因此避免了通过闭合 `title` attribute 而注入新的任意 HTML。该转义通过诸如 `setAttribute` 的浏览器原生的 API 完成,所以除非浏览器本身存在安全漏洞,否则不会存在安全漏洞。++## 潜在的危险++在任何 web 应用中,允许未清洁的用户提供的内容成为 HTML、CSS 或 JavaScript 都有潜在的危险。因此应该避免所有的可能。尽管如此,有些情况下的风险是可接受的。

这里可能“允许用户提供的未经清洁的内容”读起来通顺一些?

Jinjiang

comment created time in 2 months

Pull request review commentvuejs/cn.vuejs.org

Update

+---+title: 安全+type: guide+order: 504+---++## 报告安全漏洞++当一个安全漏洞被报告时,它会立即成为我们的最高顾虑,并由全职贡献者停下手中的工作处理此事。如发现任何安全漏洞,请邮件给 [vuejs.org@gmail.com](mailto:vuejs.org@gmail.com)。++虽然发现新安全漏洞是比较罕见的事,我们仍推荐始终使用最新版本的 Vue 及其官方的周边库,以确保应用始终尽可能安全。++## Vue 保护你的方式++### HTML 内容++不论使用模板还是渲染函数,内容都会被自动转义。也就是说对于这份模板:++```html+<h1>{{ userProvidedString }}</h1>+```++如果 `userProvidedString` 包含了:++```js+'<script>alert("hi")</script>'+```++则它会被转义成为如下 HTML:++```html+&lt;script&gt;alert(&quot;hi&quot;)&lt;/script&gt;+```++因此避免了脚本注入。该转义通过诸如 `textContent` 的浏览器原生的 API 完成,所以除非浏览器本身存在安全漏洞,否则不会存在安全漏洞。++### Attribute 绑定++同样地,动态 attribute 绑定也会自动被转义。也就是说对于这份模板:++```html+<h1 v-bind:title="userProvidedString">+  hello+</h1>+```++如果 `userProvidedString` 包含了:++```js+'" onclick="alert(\'hi\')'+```++则它会被转义成为如下 HTML:++```html+&quot; onclick=&quot;alert('hi')+```++因此避免了通过闭合 `title` attribute 而注入新的任意 HTML。该转义通过诸如 `setAttribute` 的浏览器原生的 API 完成,所以除非浏览器本身存在安全漏洞,否则不会存在安全漏洞。++## 潜在的危险++在任何 web 应用中,允许未清洁的用户提供的内容成为 HTML、CSS 或 JavaScript 都有潜在的危险。因此应该避免所有的可能。尽管如此,有些情况下的风险是可接受的。

未净化?这个感觉不是很好翻译……

个人感觉净化通常是做很特殊的处理,清洁更通俗一些,更像是从脏变干净,至少不是从干净变更干净?

Jinjiang

comment created time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 67c8da0e646ae211cadd7ad6d172e4b186ab84b2

Update security.md

view details

push time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 521cc33e53719943cdd51df653c8ec5f51f1b345

Apply suggestions from code review Co-Authored-By: GU Yiling <justice360@gmail.com>

view details

push time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 8ed9c65a80d16986968eea20e40f7ca013db682f

Update security.md

view details

push time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 997b6a71256cbfed68c1340315e59858e01acaa5

Update components.md

view details

push time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha e9627000a801f6925a10752ab2d34ebb455631d8

translated 2nd half of security.md

view details

Jinjiang

commit sha e2544a07a9d5d294e7168038b351d07ef96ce4fb

kept writing-guide.md original

view details

push time in 2 months

PR opened vuejs/cn.vuejs.org

Reviewers
WIP: Update

Ref: https://github.com/vuejs/vuejs.org/compare/afe7421c...34df294b

+471 -47

0 comment

34 changed files

pr created time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 2b5c5e633d63c113af68f06eb78098cb4207ce7d

translated 1st half of security.md

view details

push time in 2 months

push eventJinjiang/vuejs.org

Ivan Sieder

commit sha 4be29db708ac6162d9029fbc4172113ffe7dfbdf

fixed 404 link to YDKJS (#2334)

view details

Evan You

commit sha 41896590a76511c1dbc7bfe083be9ce719bb8abd

chore: increase OC sponsor count

view details

José Antonio Chio

commit sha 254d5ca5dba6b2f6d884ff0ee168bf89cd3f147a

fix avatar aspect ratio (#2339)

view details

José Antonio Chio

commit sha 49ac8123d71accd926ee7bfb2fcfd4f9b21607d6

chore: add sponsor name for a11y (#2340)

view details

drewmarshburn

commit sha a1c88a7f88137497b28177c67434c14cdf563049

Edit grammar prop validation (#2344) Just giving subject/verb agreement.

view details

Mattias Naarttijärvi

commit sha 7530410ac1fad43a0c134727216d6eb83354e3c7

Fastcoding logo as png (#2343)

view details

Evan You

commit sha 3cec00e18bb178b592a1abaa583edd6bd053cc2e

Partners: add Monterail

view details

Micha Pietsch

commit sha bd9ef5aed2d740707d19cec312ba68f5a9284d03

Correctly nest sub-menu for h3s inside h2 list item (#2345)

view details

dependabot[bot]

commit sha ea9522e9acadc1626f6373a358d8e1ed0d752cc4

chore(deps): bump mixin-deep from 1.3.1 to 1.3.2 (#2347) Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. - [Release notes](https://github.com/jonschlinkert/mixin-deep/releases) - [Commits](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2) Signed-off-by: dependabot[bot] <support@github.com>

view details

Hiển Đào Vinh

commit sha 32468482fd71cae7038a1060d538a7ec2b16c116

fix: enforce `rel="noopener"` for external _blank targets` (#2348)

view details

drewmarshburn

commit sha e91a60306843e19d3cd2a3d76856a8433a7d895e

Update components-custom-events.md (#2349) Added an article where needed.

view details

Rafael Vergara

commit sha 1c55e503c29c60abc0c1d0f8608e3e7df3b7ddf0

Add Spanish language to dropdown (#2353)

view details

Dan Hogan

commit sha 8566c250ae8d3f51d57ea28a1dd671efd0f6b604

Added rel="noopener noreferrer" to external links (#2356)

view details

J·Y

commit sha dadf0bd3579feaf2ca2dcc8d05e83207040c2b31

remove 'partials/blog' logic (#2362)

view details

vue-bot

commit sha dda83caf04e6572e8ae1b1a1614526480e4c5eb9

chore: update sponsors (#2346)

view details

vue-bot

commit sha d686035581a88bff6d4a9e2dc0a15000d08fcc23

chore: update sponsors (#2364)

view details

Chris Fritz

commit sha 2932a108a5ac56d78e747ab99544208fe6f60908

Vue Docs Writing Guide (#2317) * add vue docs writing guide * add note about emoji to writing guide * add note about invalidating language to writing guide * add note about blending tips into content in writing guide * capitalize Oxford in writing guide * reword feature discussions note in writing guide * clarify 'supported environment' in writing guide * add software resources to writing guide * clarify language in writing guide * clarify language in writing guide Co-Authored-By: Natalia Tepluhina <NataliaTepluhina@users.noreply.github.com> * pull oxford comma image into repo * add note about allowing abbreviation symbols on keyboards

view details

Chris Fritz

commit sha a031e11ba2af6a4a20c96f720152fb17bca3fd47

Security guide (#1760) * first draft of security guide * add note about ssr * add vulnerability reporting email and minor security tweaks * add final notes from security feedback

view details

Mike Moede

commit sha 39a7ad22b01e15d51e73f3dbe0343de4b005dfb9

* use production npm install for docker examples (#2365)

view details

Ian Fabs

commit sha fdaa1c19e9d92b08a7f907cc7ce7c60ab9af7c34

Update components-edge-cases.md (#2359) Changed link to new JDFiddle with typo corrected, as noted in #2156

view details

push time in 2 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 0737f46d6590749568914465adcd160646b183ee

translated new part in components.md

view details

push time in 2 months

create barnchvuejs/cn.vuejs.org

branch : update

created branch time in 2 months

push eventJinjiang/vuejs.org

Silvan Wakker

commit sha e1fdae34859c5483ef8646542f45b17d34685bca

Update index.md (#2288) * Update index.md It wasn't at first clear to me you should declare the component before instantiating your app. This hopefully makes that clear to even beginners. * Update src/v2/guide/index.md Co-Authored-By: Phan An <me@phanan.net>

view details

Grgur Grisogono

commit sha 5c3b28630c4520d93ad103580279b34549c33da3

Minor A11y & Perf fixes (#2292) * rel="nooper" where target blank * fixed id conflict * ensure aria label in search field * force https * display:swap for google fonts * restore config * revert formatting * Revert indentation and coding style

view details

Evan You

commit sha b646ef239608ffbde0f4338be905eecb70bfb0ab

chore: adjust special sponsor id

view details

Evan You

commit sha 8e53d0a8f7eb96ce5902b7bc4719b11a753a69f7

chore: update blokt logo

view details

Felipe Flor

commit sha a0c40a738def08b5d24ed5526b9063d23d4a87fa

Vue-Partners page (#2274)

view details

Evan You

commit sha 4d84cef8c7dfee95d8264d5b1250934a609e99a8

feat(partners): hide navigation item until ready

view details

Evan You

commit sha fc7eeac6656768eab8a712dc533d4ca1166b263a

feat(partners): add description, allow remote image

view details

Phan An

commit sha b5f672d1b972cff53aa0358e5c2388deff6dacfe

Refactor Themes

view details

Phan An

commit sha 8f931682be09f717017de473873c01fbf1b3002c

Add theme affiliation contact info

view details

Phan An

commit sha 0189914d6b1b9def4a1cd1fa1d2187f2c7033321

Mark menu item as new

view details

Phan An

commit sha 544178e326cb93811baffee18003d024cde7405a

Re-organize menu items

view details

Phan An

commit sha 3907e82f9af6b0969a62f9c950fd6aca4958988b

Make theme images lazy load

view details

Phan An

commit sha a1630077ef40fb71cd209974393f56a9a66a1b02

Replace rel="nofollow" with rel="sponsored"

view details

Phan An

commit sha dac673ed5bdcd278946c01fc1484fcb5a56f438d

Rebase and move Partners page to Resources

view details

Phan An

commit sha 2ffe7dd533a073d25558134b0b9ef9e948e015db

Opportunity fix: menu and sidebar

view details

Ben Hong

commit sha 8a22536865729c4b6bfa5c8d8ac6571ddd28e753

#2297 - Fix hidden hamburger menu mobile (#2298) * fix (#2297): Fix hidden hamburger menu on mobile * fix (#2297): Keep icon hidden on home page under side menu * refactor (#2297): Remove duplicate z-index definition * refactor (#2297): Setup base z-index manifest * refactor (#2297): Abstract sidebar z-index baseline * refactor (#2297): Establish base header z-index * refactor (#2297): Establish z-index for overlay and modals

view details

Roy Dragseth

commit sha fd85e1269c09af18d67e22a5a52871006114f760

Fix the reference to the npm guide. (#2303) Issue 2301

view details

Ben Hong

commit sha e9ff1276ae91802a1666f18b1472fc1e6bf9ce47

2299 duplicate mobile menu items (#2300) * fix (#2299): Remove duplicate entries on non-home pages * fix (#2299): Improve spacing for sponsors on mobile * fix (#2299): Align sponsors with content on desktop * refactor (#2299): Standardize content padding vertical * fix (#2299): Improve spacing for clicking on mobile for last sidebar item

view details

Grgur Grisogono

commit sha ae12570313625eadcf04a14bc3ab7de2f41bca36

Vue.JS Partners: Modus Create (#2296) * Vue.JS Partners: Modus Create * Updated copy and UTM * shorter description * added youtube

view details

Evan You

commit sha 791dc649dabff607f89903d1c37f4f9199996308

tweak partners page

view details

push time in 2 months

issue closedvuejs/cn.vuejs.org

Debugger for Firefox 配置无效

Debugger for Firefox 配置无效,无法触发断点 (Debugger for chrome配置是好地) 文件

src/v2/cookbook/debugging-in-vscode.md

vue-cli: 4.04 vue: 2.6.10

closed time in 2 months

Akimotorakiyu

issue closedvuejs/cn.vuejs.org

Component template should contain exactly one root element

<!--

首先感谢您的参与! 为了让社区工作更有效率和质量,我们做了一些约定,希望得到您的理解和支持。

首先请阅读 README[1] 了解如何参与贡献。 如果你参与的是翻译相关的工作,有劳额外移步 wiki[2] 了解相关注意事项。

谢谢!

[1] https://github.com/vuejs/cn.vuejs.org/tree/master/README.md [2] https://github.com/vuejs/cn.vuejs.org/wiki

--> https://cn.vuejs.org/v2/guide/conditional.html#%E5%9C%A8-lt-template-gt-%E5%85%83%E7%B4%A0%E4%B8%8A%E4%BD%BF%E7%94%A8-v-if-%E6%9D%A1%E4%BB%B6%E6%B8%B2%E6%9F%93%E5%88%86%E7%BB%84

Component template should contain exactly one root element

closed time in 2 months

penghmcc

issue closedvuejs/cn.vuejs.org

中文教程中关于组件具名插槽的注意事项有歧义

<!--

首先感谢您的参与! 为了让社区工作更有效率和质量,我们做了一些约定,希望得到您的理解和支持。

首先请阅读 README[1] 了解如何参与贡献。 如果你参与的是翻译相关的工作,有劳额外移步 wiki[2] 了解相关注意事项。

谢谢!

[1] https://github.com/vuejs/cn.vuejs.org/tree/master/README.md [2] https://github.com/vuejs/cn.vuejs.org/wiki

-->

中文文档 具名插槽 最后有一行加粗的描述:

注意 v-slot 只能添加在一个 <template> ......

对比英文文档

Note that v-slot can only be added to a <template> ......

中文文档可以理解为,一个是v-slot只能在一个<template>上,不能有两个 <template> ,显然与实际情况以及英文原文不符,感觉应该删除一个这样的表达,感觉原翻译在这个地方倾向直译了英文文档内容,因为英文原文里面有一个量词:a

closed time in 2 months

fishtrees

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha 1ada93826811d4160ba13ebf069224c5d607662b

generated docs

view details

push time in 2 months

push eventvuejs/cn.vuejs.org

LordRobert

commit sha 91a7eac4965c1b4f62d8bcfcf8db72539bbf6c10

Update components-slots.md (#1029) * Update components-slots.md 一处翻译错了 * Update components-slots.md Co-authored-by: Jinjiang <zhaojinjiang@me.com>

view details

push time in 2 months

PR merged vuejs/cn.vuejs.org

Update components-slots.md

components-slots中,scoped slots一处翻译错了,很容易误导人

<!--

首先感谢您的参与! 为了让社区工作更有效率和质量,我们做了一些约定,希望得到您的理解和支持。

首先请阅读 README[1] 了解如何参与贡献。 如果你参与的是翻译相关的工作,有劳额外移步 wiki[2] 了解相关注意事项。

谢谢!

[1] https://github.com/vuejs/cn.vuejs.org/tree/master/README.md [2] https://github.com/vuejs/cn.vuejs.org/wiki

-->

+1 -1

0 comment

1 changed file

LordRobert

pr closed time in 2 months

issue closedvuejs/cn.vuejs.org

input框绑定v-model值为空的时候,在移动端会出现输入一下键盘就自动收起的情况,是为什么

<!--

首先感谢您的参与! 为了让社区工作更有效率和质量,我们做了一些约定,希望得到您的理解和支持。

首先请阅读 README[1] 了解如何参与贡献。 如果你参与的是翻译相关的工作,有劳额外移步 wiki[2] 了解相关注意事项。

谢谢!

[1] https://github.com/vuejs/cn.vuejs.org/tree/master/README.md [2] https://github.com/vuejs/cn.vuejs.org/wiki

-->

closed time in 2 months

Denton123

push eventLordRobert/cn.vuejs.org

Jinjiang

commit sha 85afbc087ae0e060ab77914762174b62992d833c

Update components-slots.md

view details

push time in 2 months

issue commentvuejs/vue-docs-zh-cn

在已有项目中 vue add typescript 报错

cc @sodatea

tinaawang

comment created time in 2 months

issue closedJinjiang/px2rem-loader

几个未能转换成功的场景

  1. 第三方的ui框架的css(如ionic/vux/Mint UI/Vant等)
  2. html 中的 style="height:800px" ;
  3. 使用js动态给dom添加的样式属性(class,style)

closed time in 2 months

roy-lau

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha ff35ada1004255a04d5af5fa9067d0df1ffd3429

generated docs

view details

push time in 3 months

push eventJinjiang/zh-lint

Jinjiang

commit sha ef53cd36b8cfe0ccce88205556e1ac62fd4d7830

added raw data into the after-parsed data structure

view details

Jinjiang

commit sha eab9d772b956f6d939db48cb88ae34f1a52793ef

supported fixing space beside punctuations

view details

Jinjiang

commit sha fb7d425f7c51c034438fe10965612041a71e1ae5

supported fixing space besides quotes

view details

Jinjiang

commit sha a126a761ea269966b1e00d895c6ca50eee44a1f3

supported replacing traditional characters

view details

push time in 3 months

push eventJinjiang/zh-lint

Jinjiang

commit sha 1b757de792c0c91bbe24659696dea92e9f5c69f4

added lint(str) and initialized some rules

view details

Jinjiang

commit sha 105f9cf5b6603de8a670978bdfeea4680c16d2f4

supported fixing space between half-width content and full-width content

view details

Jinjiang

commit sha 0fa81a7b46b10af1d8be10639da3f5e0ad553b72

added some comments for unfinished rules

view details

Jinjiang

commit sha b43e47de421a6182416f87307c901bcae8a55f2e

supported fixing space besides brackets

view details

Jinjiang

commit sha a40378c42e2536a27226aca6cc4db9144090757d

supported fixing full-width/half-width mixed punctuation usage

view details

push time in 3 months

create barnchJinjiang/zh-lint

branch : next

created branch time in 3 months

push eventJinjiang/zh-lint

Jinjiang

commit sha 4effe4f492976c7086e9ad2f86fcabe218a5b425

supported recording group peices and token siblings

view details

push time in 4 months

push eventJinjiang/zh-lint

Jinjiang

commit sha 2915c59d1c198768d38855969b7f8849e4f1096b

improved the code comments

view details

push time in 4 months

create barnchJinjiang/zh-lint

branch : options

created branch time in 4 months

delete branch Jinjiang/zh-lint

delete branch : pure-text-parser

delete time in 4 months

push eventJinjiang/zh-lint

Jinjiang

commit sha 50fc0da82f47f518726d0e2440daf65ce156802f

made options preparation a separated function

view details

push time in 4 months

push eventJinjiang/zh-lint

Jinjiang

commit sha a7b69dfe1c2af18ad4f0adc1be9eef77daf932a9

re-design and re-implemented replace option

view details

push time in 4 months

push eventJinjiang/zh-lint

Jinjiang

commit sha b7c2e6a3abd2c3d1bf83c93203e18b0c89963b86

re-design and re-implemented replace option

view details

push time in 4 months

push eventvuejs/cn.vuejs.org

Jinjiang

commit sha d4a6665369dfdb066490d70cb70ecaf1016d1c07

generated docs

view details

push time in 4 months

delete branch vuejs/cn.vuejs.org

delete branch : update

delete time in 4 months

more