From 934bebd8cddddc4c6dffa67b62008e48ae96dae2 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Wed, 28 Jan 2026 01:02:10 +0400
Subject: [PATCH] refac

---
 src/lib/components/common/FileItemModal.svelte | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/lib/components/common/FileItemModal.svelte b/src/lib/components/common/FileItemModal.svelte
index 7db775865e..525a315f3d 100644
--- a/src/lib/components/common/FileItemModal.svelte
+++ b/src/lib/components/common/FileItemModal.svelte
@@ -1,5 +1,6 @@
 <script lang="ts">
 	import type { WorkBook } from 'xlsx';
+	import DOMPurify from 'dompurify';
 
 	import { getContext, onMount, tick } from 'svelte';
 
@@ -118,11 +119,11 @@
 		const range = XLSX.utils.decode_range(worksheet['!ref'] || 'A1:A1');
 		rowCount = range.e.r - range.s.r + 1;
 
-		excelHtml = XLSX.utils.sheet_to_html(worksheet, {
+		excelHtml = DOMPurify.sanitize(XLSX.utils.sheet_to_html(worksheet, {
 			id: 'excel-table',
 			editable: false,
 			header: ''
-		});
+		}));
 	};
 
 	$: if (selectedSheet && excelWorkbook) {