1
0
mirror of synced 2024-11-24 06:50:16 +01:00

Merge pull request #1549 from brun0ne/fix-xss

Fixed xss in addOperation
This commit is contained in:
a3957273 2024-02-04 01:41:56 +00:00 committed by GitHub
commit 75c4e196fa
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -396,7 +396,11 @@ class RecipeWaiter {
const item = document.createElement("li");
item.classList.add("operation");
item.innerHTML = name;
if (this.app.operations[name] != null) {
item.innerHTML = name;
}
this.buildRecipeOperation(item);
document.getElementById("rec-list").appendChild(item);