From 33a14324cbe79f77e8546203415cc1e694729748 Mon Sep 17 00:00:00 2001 From: Justin Byers Date: Fri, 26 Jan 2024 11:44:20 -0600 Subject: [PATCH] Fix header url param to not render html - PR #346 submitted by Eric to the original repo fixes xss bug --- app/client/src/js/index.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/client/src/js/index.ts b/app/client/src/js/index.ts index 1dd6b60..8ff30b9 100644 --- a/app/client/src/js/index.ts +++ b/app/client/src/js/index.ts @@ -208,7 +208,7 @@ socket.on('headerBackground', (data: string) => { socket.on('header', (data: string) => { if (data) { - header.innerHTML = data; + header.textContent = data; header.style.display = 'block'; // header is 19px and footer is 19px, recaculate new terminal-container and resize terminalContainer.style.height = 'calc(100% - 38px)';