[SECURITY][High] Relation graph node HTML rendering allows unsafe content

[lhy8888]

Summary

Relation graph component rendered node HTML through v-html without default sanitization.

Severity

High

Affected Files

cmdb-ui/src/modules/cmdb/3rd/relation-graph/core4vue/SeeksRGNode.vue

Recommended Remediation

Add safeHtml escaping by default with explicit opt-in flag for unsafe raw HTML.

Patch Branch

codex/sec-ui-relationgraph-html

Patch Commit

3c9732a

Fork Branch URL

https://github.com/lhy8888/cmdb-security-fork/tree/codex/sec-ui-relationgraph-html