sanatize strings displayed in control page

eosnetworkfoundation · Oct 30, 2024 · a2c6b4e · a2c6b4e
1 parent f518d0a
commit a2c6b4e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/webcontent/control.html b/webcontent/control.html
@@ -75,14 +75,14 @@ <h3 id="control-meta-data-file">Control</h3>
     // Select the <h3> child of the div with id="error-message"
     const errorMessageH3 = document.querySelector("#error-message h3");
     if (errorMessageH3) {
-      errorMessageH3.innerHTML = error;
+      errorMessageH3.textContent = error.replace(/[&<>'";]/g, '');
       document.getElementById("error-message").style.display = "block";
     }
   } else if (success) {
     // Select the <h3> child of the div with id="success-message"
     const successMessageH3 = document.querySelector("#success-message h3");
     if (successMessageH3) {
-      successMessageH3.innerHTML = success;
+      successMessageH3.textContent = success.replace(/[&<>'";]/g, '');;
       document.getElementById("success-message").style.display = "block";
     }
   }