Escaping HTML in avionics messages.

2023-10-11 21:54:08 -04:00 · 2023-10-11 21:54:08 -04:00 · deaf23d910
parent 61783f3c96
commit deaf23d910
1 changed files with 1 additions and 1 deletions
--- a/htdocs/lib/MessagePanel.js
+++ b/htdocs/lib/MessagePanel.js
@ -458,7 +458,7 @@ HfdlMessagePanel.prototype.pushMessage = function(msg) {
    // Append messsage if present
    if (msg.message) {
        $b.append($(
-            '<tr><td class="message" colspan="4">' + msg.message + '</td></tr>'
+            '<tr><td class="message" colspan="4">' + this.htmlEscape(msg.message) + '</td></tr>'
        ))
    }