Escape HTML

2022-01-30 00:27:26 +03:00
parent 08cbc5aa8f
commit 59adbc348a
60 changed files with 245 additions and 192 deletions
@@ -1,3 +1,4 @@
+import escapeHtml from 'escape-html';
 import 'jquery';
 import taskButton from '../../scripts/taskbutton';
 import loading from '../../components/loading/loading';
@@ -297,7 +298,7 @@ import cardBuilder from '../../components/cardbuilder/cardBuilder';

            if (virtualFolder.showNameWithIcon) {
                html += '<div style="margin:1em 0;position:width:100%;">';
-                html += virtualFolder.Name;
+                html += escapeHtml(virtualFolder.Name);
                html += '</div>';
            }

@@ -319,7 +320,7 @@ import cardBuilder from '../../components/cardbuilder/cardBuilder';
        if (virtualFolder.showNameWithIcon) {
            html += '&nbsp;';
        } else {
-            html += virtualFolder.Name;
+            html += escapeHtml(virtualFolder.Name);
        }

        html += '</div>';