#39 HTML characters are displayed instead of the entities

Author: ann-linh-mitre

src/views/CVERecord.vue

@@ -64,7 +64,7 @@
                         <th>Description</th>
                         <td>
                           <p v-for="description in this.$store.state.recordData.description_data" :key="description.index">
-                            {{$sanitize(description.value)}}
+                            <span v-html="$sanitize(description.value)"></span>
                           </p>
                         </td>
                       </tr>
@@ -81,7 +81,7 @@
                         <th>Problem Types</th>
                         <td>
                           <ul v-for="problem in this.$store.state.recordData.problemtype_data" :key="problem.index">
-                            <li v-if="problem.value !== 'n/a'">{{$sanitize(problem.value)}}</li>
+                            <li v-if="problem.value !== 'n/a'"><span v-html="$sanitize(problem.value)"></span></li>
                           </ul>
                         </td>
                       </tr>
@@ -91,18 +91,20 @@
                         <th>Vendors, Products & Versions</th>
                         <td>
                           <ul v-for="vendorProductVersion in this.$store.state.recordData.affects.vendors" :key="vendorProductVersion.index">
-                            <li><span class="has-text-weight-bold">Vendor:</span> {{$sanitize(vendorProductVersion.vendor_name)}} </li>
+                            <li>
+                              <span class="has-text-weight-bold">Vendor: </span><span v-html="$sanitize(vendorProductVersion.vendor_name)"></span>
+                            </li>
                             <ul v-for="ProductVersion in vendorProductVersion.products" :key="ProductVersion.index" class="mb-2">
                               <li v-if="ProductVersion !== undefined">
-                                <span class="has-text-weight-bold">Product:</span> {{$sanitize(ProductVersion.product_name)}}
+                                <span class="has-text-weight-bold">Product: </span><span v-html="$sanitize(ProductVersion.product_name)"></span>
                               </li>
                               <li v-if="ProductVersion.vendor_version.version_value && ProductVersion.vendor_version.version_value.length > 0">
                                 <span class="has-text-weight-bold">Versions:</span>
-                                {{$sanitize(ProductVersion.vendor_version.version_value.join(', '))}}
+                                <span v-html="$sanitize(ProductVersion.vendor_version.version_value.join(', '))"></span>
                               </li>
                               <li v-if="ProductVersion.vendor_version.version_affected && ProductVersion.vendor_version.version_affected.length > 0">
                                 <span class="has-text-weight-bold">Versions Affected: </span>
-                                {{$sanitize(ProductVersion.vendor_version.version_affected.join(', '))}}
+                                <span v-html="$sanitize(ProductVersion.vendor_version.version_affected.join(', '))"></span>
                               </li>
                             </ul>
                           </ul>
@@ -113,7 +115,7 @@
                         <td>
                           <ul v-for="reference in this.$store.state.recordData.reference_data" :key="reference.index">
                             <li v-if="reference.url !== undefined" class="cve-task-tile-list-item">
-                              <a :href="reference.url" class="cve-word-wrap">
+                              <a :href="$sanitize(reference.url)" class="cve-word-wrap">
                                 {{reference.name === undefined ? $sanitize(reference.url) : $sanitize(reference.name)}}
                               </a>
                             </li>