mirrors/jellyfin-web
1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-web synced 2025-03-30 19:56:21 +00:00
Code Activity

fix HTML escaping

Browse source
This commit is contained in:
Dmitry Lyzo 2022-10-16 00:06:54 +03:00
parent 8334a7de33
commit 39879baefe
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/components/listview/listview.js
View file

@ -149,7 +149,7 @@ import ServerConnections from '../ServerConnections';
elem.classList.add('listItemBodyText');
elem.innerHTML = '<bdi>' + text + '</bdi>';
elem.innerHTML = '<bdi>' + escapeHtml(text) + '</bdi>';
html += elem.outerHTML;
}

2
src/controllers/itemDetails/index.js
View file

@ -1068,7 +1068,7 @@ function renderTagline(page, item) {
if (item.Taglines && item.Taglines.length) {
taglineElement.classList.remove('hide');
taglineElement.innerHTML = '<bdi>' + item.Taglines[0] + '</bdi>';
taglineElement.innerHTML = '<bdi>' + escapeHtml(item.Taglines[0]) + '</bdi>';
} else {
taglineElement.classList.add('hide');
}