Escape HTML
This commit is contained in:
@@ -54,10 +54,10 @@ export default (() => {
|
||||
dialogHelper.close(dlg);
|
||||
});
|
||||
|
||||
dlg.querySelector('.formDialogHeaderTitle').innerHTML = options.title || '';
|
||||
dlg.querySelector('.formDialogHeaderTitle').innerText = options.title || '';
|
||||
|
||||
if (options.description) {
|
||||
dlg.querySelector('.fieldDescription').innerHTML = options.description;
|
||||
dlg.querySelector('.fieldDescription').innerText = options.description;
|
||||
} else {
|
||||
dlg.querySelector('.fieldDescription').classList.add('hide');
|
||||
}
|
||||
@@ -79,7 +79,7 @@ export default (() => {
|
||||
return false;
|
||||
});
|
||||
|
||||
dlg.querySelector('.submitText').innerHTML = options.confirmText || globalize.translate('ButtonOk');
|
||||
dlg.querySelector('.submitText').innerText = options.confirmText || globalize.translate('ButtonOk');
|
||||
|
||||
dlg.style.minWidth = `${Math.min(400, dom.getWindowSize().innerWidth - 50)}px`;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user