1
0
mirror of synced 2024-11-24 15:00:17 +01:00

fix xss in addOperation

This commit is contained in:
Brunon Blok 2023-04-06 23:31:45 +00:00
parent 1bc88728f0
commit 6d3ca3f56c

View File

@ -396,7 +396,7 @@ class RecipeWaiter {
const item = document.createElement("li");
item.classList.add("operation");
item.innerHTML = name;
item.innerHTML = Utils.escapeHtml(name);
this.buildRecipeOperation(item);
document.getElementById("rec-list").appendChild(item);