bitwarden/browser
1
0
Fork 0
mirror of https://github.com/bitwarden/browser synced 2025-12-15 07:43:35 +00:00
Code Issues Releases Wiki Activity

don't use innerHTML for sso handOffMessage (#1285)

Browse Source
This commit is contained in:
Kyle Spearrin
2021-11-09 12:15:58 -05:00
committed by GitHub
parent 5b6fb16591
commit f8aea1e861
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/connectors/sso.ts
View File

@@ -25,8 +25,11 @@ function initiateBrowserSso(code: string, state: string) {
window.postMessage({ command: 'authResult', code: code, state: state }, '*');
const handOffMessage = ('; ' + document.cookie).split('; ssoHandOffMessage=').pop().split(';').shift();
document.cookie = 'ssoHandOffMessage=;SameSite=strict;max-age=0';
document.getElementById('content').innerHTML =
`<p>${handOffMessage}</p>`;
let content = document.getElementById('content');
content.innerHTML = '';
let p = document.createElement('p');
p.innerText = handOffMessage;
content.appendChild(p);
}
function extractFromRegex(s: string, regexString: string) {