From 5cf3731f9469377d3e760a7b6a977b4762e81c13 Mon Sep 17 00:00:00 2001
From: Antoine Nguyen <tonio@ngyn.org>
Date: Thu, 14 Dec 2023 14:52:58 +0100
Subject: [PATCH] Prevent XSS issue

---
 modoboa/static/js/global.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modoboa/static/js/global.js b/modoboa/static/js/global.js
index 6d1d1d722..0e6dbc5d1 100644
--- a/modoboa/static/js/global.js
+++ b/modoboa/static/js/global.js
@@ -346,7 +346,7 @@ function defaultAjaxErrorHandler(event, jqxhr, settings) {
     } catch (x) {
         data = gettext("Internal error");
     }
-    $('body').notify('error', data);
+    $('body').notify('error', htmlEncode(data));
 }
 
 /**