fix: Implement code from pull gophish#2991, fixing XSS vulnerability

Touexe · Feb 21, 2024 · fdc8e82 · fdc8e82
1 parent bc56edb
commit fdc8e82
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/static/js/src/app/campaigns.js b/static/js/src/app/campaigns.js
@@ -132,7 +132,7 @@ function deleteCampaign(idx) {
         type: "warning",
         animation: false,
         showCancelButton: true,
-        confirmButtonText: "Delete " + campaigns[idx].name,
+        confirmButtonText: "Delete " + escapeHtml(campaigns[idx].name),
         confirmButtonColor: "#428bca",
         reverseButtons: true,
         allowOutsideClick: false,