bitwarden/browser
1
0
Fork 0
mirror of https://github.com/bitwarden/browser synced 2025-12-17 00:33:44 +00:00
Code Issues Releases Wiki Activity

don't use innerHTML for sso handOffMessage (#1285)

Browse Source
This commit is contained in:
Kyle Spearrin
2021-11-09 12:15:58 -05:00
committed by GitHub
parent 5b6fb16591
commit f8aea1e861
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/connectors/sso.ts
View File

@@ -25,8 +25,11 @@ function initiateBrowserSso(code: string, state: string) {
window.postMessage({ command: 'authResult', code: code, state: state }, '*'); window.postMessage({ command: 'authResult', code: code, state: state }, '*');
const handOffMessage = ('; ' + document.cookie).split('; ssoHandOffMessage=').pop().split(';').shift(); const handOffMessage = ('; ' + document.cookie).split('; ssoHandOffMessage=').pop().split(';').shift();
document.cookie = 'ssoHandOffMessage=;SameSite=strict;max-age=0'; document.cookie = 'ssoHandOffMessage=;SameSite=strict;max-age=0';
document.getElementById('content').innerHTML = let content = document.getElementById('content');
`<p>${handOffMessage}</p>`; content.innerHTML = '';
let p = document.createElement('p');
p.innerText = handOffMessage;
content.appendChild(p);
} }
function extractFromRegex(s: string, regexString: string) { function extractFromRegex(s: string, regexString: string) {