feat: handle xss vulnerability in js

bcgov · Jul 9, 2024 · 9720332 · 9720332
1 parent 33d78b4
commit 9720332
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/...extensions-24/themes/src/main/resources/theme/bcgov/login/resources/js/script-20221128.js b/...extensions-24/themes/src/main/resources/theme/bcgov/login/resources/js/script-20221128.js
@@ -61,7 +61,9 @@ function addTooltips() {
  var content = elem.textContent;
 
  if (content) {
- elem.innerHTML = content;
+ var textNode = document.createTextNode(content);
+ elem.innerHTML = '';
+ elem.appendChild(textNode);
  }
  }
 }