fix xss in addOperation
This commit is contained in:
parent
1bc88728f0
commit
6d3ca3f56c
@ -396,7 +396,7 @@ class RecipeWaiter {
|
|||||||
const item = document.createElement("li");
|
const item = document.createElement("li");
|
||||||
|
|
||||||
item.classList.add("operation");
|
item.classList.add("operation");
|
||||||
item.innerHTML = name;
|
item.innerHTML = Utils.escapeHtml(name);
|
||||||
this.buildRecipeOperation(item);
|
this.buildRecipeOperation(item);
|
||||||
document.getElementById("rec-list").appendChild(item);
|
document.getElementById("rec-list").appendChild(item);
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user