mirrors/jellyfin-web
1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-web synced 2025-03-30 19:56:21 +00:00
Code Activity

Escape HTML

Browse source
This commit is contained in:
Dmitry Lyzo 2022-01-30 00:27:26 +03:00
parent 08cbc5aa8f
commit 59adbc348a
60 changed files with 245 additions and 192 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/components/displaySettings/displaySettings.js
View file

@ -1,3 +1,4 @@
import escapeHtml from 'escape-html';
import browser from '../../scripts/browser';
import layoutManager from '../layoutManager';
import { pluginManager } from '../pluginManager';
@ -21,7 +22,7 @@ import template from './displaySettings.template.html';
function fillThemes(select, selectedTheme) {
skinManager.getThemes().then(themes => {
select.innerHTML = themes.map(t => {
return `<option value="${t.id}">${t.name}</option>`;
return `<option value="${t.id}">${escapeHtml(t.name)}</option>`;
}).join('');
// get default theme
@ -47,7 +48,7 @@ import template from './displaySettings.template.html';
});
selectScreensaver.innerHTML = options.map(o => {
return `<option value="${o.value}">${o.name}</option>`;
return `<option value="${o.value}">${escapeHtml(o.name)}</option>`;
}).join('');
selectScreensaver.value = userSettings.screensaver();