From a7014b48ec46b74a6480c56525408efe6c8b9ba7 Mon Sep 17 00:00:00 2001 From: Killian Marty Date: Wed, 13 Dec 2023 23:14:45 +0100 Subject: [PATCH] XSS fix --- public_html/js/phone.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/public_html/js/phone.js b/public_html/js/phone.js index e0e6fc9..8a95eeb 100644 --- a/public_html/js/phone.js +++ b/public_html/js/phone.js @@ -12,11 +12,11 @@ class Phone{ let h2 = document.createElement("h2"); h2.className = "messageTitle"; - h2.innerHTML = message.title; + h2.innerText = message.title; let p = document.createElement("p"); p.className = "messageContent"; - p.innerHTML = message.content; + p.innerText = message.content; msg.appendChild(h2); msg.appendChild(p);