fix xss in addOperation

This commit is contained in:
Brunon Blok 2023-04-06 23:31:45 +00:00
parent 1bc88728f0
commit 6d3ca3f56c

View file

@ -396,7 +396,7 @@ class RecipeWaiter {
const item = document.createElement("li"); const item = document.createElement("li");
item.classList.add("operation"); item.classList.add("operation");
item.innerHTML = name; item.innerHTML = Utils.escapeHtml(name);
this.buildRecipeOperation(item); this.buildRecipeOperation(item);
document.getElementById("rec-list").appendChild(item); document.getElementById("rec-list").appendChild(item);