Code scanning - DOM text reinterpreted as HTML #1427

URI encode fix
GSA · Sep 18, 2024 · cc1fa08 · cc1fa08
1 parent aeee333
commit cc1fa08
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/assets/client/src/preview.js b/assets/client/src/preview.js
@@ -51,7 +51,7 @@ const renderPreview = () => (
 )
 
 const rootElement = document.getElementById('preview');
-const imageBase = rootElement.getAttribute('data-image-base');
+const imageBase = encodeURI(rootElement.getAttribute('data-image-base'));
 ReactDOM.render(renderPreview(), rootElement);
 
 // If you want your app to work offline and load faster, you can change