diff options
| author | Brock Vojkovic <git@vojk.au> | 2026-08-19 20:09:02 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-08-19 14:09:02 +0200 |
| commit | 5ffd32ca2f5e3648bcaa61ad18b94f258852edcb (patch) | |
| tree | 328f5c4f580bfc0a9ef608fbaa29628a66614932 /client/simple/src/js/util | |
| parent | 374939b888c8644b408b793fe42d584454631cec (diff) | |
[fix] calculator: XSS from innerHTML (#6551)
* [fix] calculator: XSS from innerHTML
* [build] /static
Diffstat (limited to 'client/simple/src/js/util')
| -rw-r--r-- | client/simple/src/js/util/appendAnswerElement.ts | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/client/simple/src/js/util/appendAnswerElement.ts b/client/simple/src/js/util/appendAnswerElement.ts index d21db3f48..8c3d52923 100644 --- a/client/simple/src/js/util/appendAnswerElement.ts +++ b/client/simple/src/js/util/appendAnswerElement.ts @@ -23,7 +23,7 @@ export const appendAnswerElement = (element: HTMLElement | string | number): voi if (!(element instanceof HTMLElement)) { const span = document.createElement("span"); - span.innerHTML = element.toString(); + span.textContent = element.toString(); // biome-ignore lint/style/noParameterAssign: TODO element = span; } |