From c0a06eec46071acc1151f64ea8ff0ec06ebfee2b Mon Sep 17 00:00:00 2001 From: Ozzie Isaacs Date: Mon, 30 Aug 2021 17:05:53 +0200 Subject: [PATCH] Removed xss on shelf add/remove action --- cps/static/js/details.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cps/static/js/details.js b/cps/static/js/details.js index 525b0008..3487b901 100644 --- a/cps/static/js/details.js +++ b/cps/static/js/details.js @@ -69,7 +69,7 @@ $("#archived_cb").on("change", function() { templates.remove({ add: this.href, remove: $this.data("remove-href"), - content: this.textContent + content: $("
").text(this.textContent).html() }) ); break; @@ -78,7 +78,7 @@ $("#archived_cb").on("change", function() { templates.add({ add: $this.data("add-href"), remove: this.href, - content: this.textContent + content: $("
").text(this.textContent).html(), }) ); break;