fix xss in addOperation
This commit is contained in:
parent
1bc88728f0
commit
6d3ca3f56c
@ -396,7 +396,7 @@ class RecipeWaiter {
|
||||
const item = document.createElement("li");
|
||||
|
||||
item.classList.add("operation");
|
||||
item.innerHTML = name;
|
||||
item.innerHTML = Utils.escapeHtml(name);
|
||||
this.buildRecipeOperation(item);
|
||||
document.getElementById("rec-list").appendChild(item);
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user