mirror of
https://github.com/gchq/CyberChef
synced 2025-12-05 23:53:27 +00:00
fix xss in addOperation
This commit is contained in:
@@ -396,7 +396,7 @@ class RecipeWaiter {
|
|||||||
const item = document.createElement("li");
|
const item = document.createElement("li");
|
||||||
|
|
||||||
item.classList.add("operation");
|
item.classList.add("operation");
|
||||||
item.innerHTML = name;
|
item.innerHTML = Utils.escapeHtml(name);
|
||||||
this.buildRecipeOperation(item);
|
this.buildRecipeOperation(item);
|
||||||
document.getElementById("rec-list").appendChild(item);
|
document.getElementById("rec-list").appendChild(item);
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user