Fix xss via displaymessage

2021-05-21 00:24:59 -04:00
parent 21b88e5efa
commit 7bd1eaa83d
1 changed files with 1 additions and 1 deletions
@@ -22,7 +22,7 @@ export default function (options) {

    const elem = document.createElement('div');
    elem.classList.add('toast');
-    elem.innerHTML = options.text;
+    elem.textContent = options.text;

    document.body.appendChild(elem);