mirrors/jellyfin-web
1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-web synced 2025-03-30 19:56:21 +00:00
Code Activity

Fix xss via displaymessage

Browse source
This commit is contained in:
Bill Thornton 2021-05-21 00:24:59 -04:00
parent 21b88e5efa
commit 7bd1eaa83d
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/components/toast/toast.js
View file

@ -22,7 +22,7 @@ export default function (options) {
const elem = document.createElement('div');
elem.classList.add('toast');
elem.innerHTML = options.text;
elem.textContent = options.text;
document.body.appendChild(elem);