wjones/jellyfin-web
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix XSS at wizard and dashboard library

Browse Source
This commit is contained in:
Dmitry Lyzo
2025-08-26 21:00:33 +03:00
parent 18f3083e69
commit ca2d669924
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/apps/dashboard/controllers/library.js
+1 -1
View File
@@ -345,7 +345,7 @@ function getVirtualFolderHtml(page, virtualFolder, index) {
html += '</div>';
} else if (virtualFolder.Locations.length && virtualFolder.Locations.length === 1) {
html += "<div class='cardText cardText-secondary' dir='ltr' style='text-align:left;'>";
html += virtualFolder.Locations[0];
html += escapeHtml(virtualFolder.Locations[0]);
html += '</div>';
} else {
html += "<div class='cardText cardText-secondary'>";
src/apps/wizard/controllers/library.js
+1 -1
View File
@@ -354,7 +354,7 @@ function getVirtualFolderHtml(page, virtualFolder, index) {
html += '</div>';
} else if (virtualFolder.Locations.length && virtualFolder.Locations.length === 1) {
html += "<div class='cardText cardText-secondary' dir='ltr' style='text-align:left;'>";
html += virtualFolder.Locations[0];
html += escapeHtml(virtualFolder.Locations[0]);
html += '</div>';
} else {
html += "<div class='cardText cardText-secondary'>";