Merge pull request #3519 from dmitrylyzo/fix-escapehtml
Escape HTML (cherry picked from commit ef811e699ca4473b2548badb6295256bccb82ea9) Signed-off-by: crobibero <cody@robibe.ro>
This commit is contained in:
@@ -267,7 +267,7 @@ class DirectoryBrowser {
|
||||
html += '<div class="formDialogHeader">';
|
||||
html += `<button is="paper-icon-button-light" class="btnCloseDialog autoSize" tabindex="-1" title="${globalize.translate('ButtonBack')}"><span class="material-icons arrow_back" aria-hidden="true"></span></button>`;
|
||||
html += '<h3 class="formDialogHeaderTitle">';
|
||||
html += escapeHtml(options.header) || globalize.translate('HeaderSelectPath');
|
||||
html += escapeHtml(options.header || '') || globalize.translate('HeaderSelectPath');
|
||||
html += '</h3>';
|
||||
html += '</div>';
|
||||
html += getEditorHtml(options, systemInfo);
|
||||
|
||||
Reference in New Issue
Block a user