Merge pull request #2676 from thornbill/fix-displaymessage-xss

2021-05-21 00:32:37 -04:00
parent 21b88e5efa 7bd1eaa83d
commit 70b41ff005
1 changed files with 1 additions and 1 deletions
@@ -22,7 +22,7 @@ export default function (options) {

    const elem = document.createElement('div');
    elem.classList.add('toast');
-    elem.innerHTML = options.text;
+    elem.textContent = options.text;

    document.body.appendChild(elem);