Kraut.World/server
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Properly escaping name in discussion manager

Browse source
This commit is contained in:
David Négrier 2021-06-07 10:42:08 +02:00
parent 6b8ef48e7f
commit ac911cff4b
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
front/src/WebRtc/DiscussionManager.ts
View file

@ -171,6 +171,8 @@ export class DiscussionManager {
const date = new Date(); const date = new Date();
if(isMe){ if(isMe){
name = 'Me'; name = 'Me';
} else {
name = HtmlUtils.escapeHtml(name);
} }
pMessage.innerHTML = `<span style="font-weight: bold">${name}</span> pMessage.innerHTML = `<span style="font-weight: bold">${name}</span>
<span style="color:#bac2cc;display:inline-block;font-size:12px;"> <span style="color:#bac2cc;display:inline-block;font-size:12px;">