Merge pull request #1549 from brun0ne/fix-xss
Fixed xss in addOperation
This commit is contained in:
commit
75c4e196fa
@ -396,7 +396,11 @@ class RecipeWaiter {
|
|||||||
const item = document.createElement("li");
|
const item = document.createElement("li");
|
||||||
|
|
||||||
item.classList.add("operation");
|
item.classList.add("operation");
|
||||||
|
|
||||||
|
if (this.app.operations[name] != null) {
|
||||||
item.innerHTML = name;
|
item.innerHTML = name;
|
||||||
|
}
|
||||||
|
|
||||||
this.buildRecipeOperation(item);
|
this.buildRecipeOperation(item);
|
||||||
document.getElementById("rec-list").appendChild(item);
|
document.getElementById("rec-list").appendChild(item);
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user