Fixed XSS vulnerability

2026-10-23 06:38:40 +02:00 · 2023-02-21 18:09:13 +01:00
parent 6c7a8d2052
commit 05b4a4f865
1 changed files with 2 additions and 2 deletions
@@ -255,9 +255,9 @@ Listing.prototype = {
    make_tag: function(text, type) {
        var $tag = $("<a />", {
            "name": type, "class" : "btn btn-default btn-xs",
-            "html": " " + text
+            "html": " " + htmlEncode(text)
        });
-        
+
        $("<span />", {"class" : "fa fa-remove"}).prependTo($tag);
        $tag.click($.proxy(this.remove_tag, this));
        return $tag;