fix: 修复 template XSS

package.json

@@ -110,9 +110,9 @@
         "@wisdom-map/Map": "^1.0.12-30",
         "@wisdom-map/arcgismap": "^1.0.79-30",
         "@wisdom-map/util": "^1.0.27-0",
-        "@wisdom-utils/components": "0.1.65",
+        "@wisdom-utils/components": "0.1.67",
         "@wisdom-utils/runtime": "0.0.15",
-        "@wisdom-utils/utils": "0.1.105",
+        "@wisdom-utils/utils": "0.1.107",
         "animate.css": "^4.1.1",
         "antd": "^4.17.4",
         "compression": "1.7.4",
@@ -302,6 +302,7 @@
         "webpack-theme-color-replacer": "^1.3.15",
         "webpackbar": "5.0.0-3",
         "whatwg-fetch": "^3.0.0",
+        "xss": "^1.0.11",
         "yorkie": "^2.0.0"
     }
 }

src/micro.js

@@ -14,6 +14,7 @@ import { actionCreators } from './containers/App/store';
 import loader from './render';
 import store from './stores';
 import actions from './actions';
+const xss = require('xss');
 // eslint-disable-next-line import/named
 const { processComponentName } = string;
 // eslint-disable-next-line no-undef
@@ -134,9 +135,10 @@ export const initMicroApps = () => {
         singular: false,
         scopedCSS: true,
         prefetch: 'all',
-        // getTemplate(tpl){
-        //     return tpl.replace('<script src="http://18.10.10.253:89/cookie/flash.js"><script>', '').replace();
-        // },
+        getTemplate(tpl){
+          tpl = tpl.replace('<script src="http://18.10.10.253:89/cookie/flash.js"><script>', '');
+          return tpl;
+        },
         // async fetch(url, ...args) {
         //     if (url.indexOf('/cookie/flash.js') > -1) {
         //       return {