Fix xss via displaymessage

This commit is contained in:
Bill Thornton 2021-05-21 00:24:59 -04:00
parent 21b88e5efa
commit 7bd1eaa83d

View file

@ -22,7 +22,7 @@ export default function (options) {
const elem = document.createElement('div');
elem.classList.add('toast');
elem.innerHTML = options.text;
elem.textContent = options.text;
document.body.appendChild(elem);