v1.0.176: XSS ×5 fix + syncDB await + escHtml(null)

This commit is contained in:
2026-06-24 18:03:12 +04:00
parent 666f85b743
commit 780e52d072
2 changed files with 24 additions and 21 deletions
+1
View File
@@ -86,6 +86,7 @@ window.closeAbout = closeAbout;
* Используется в истории промптов.
*/
function escHtml(s) {
if (s == null) return '';
var d = document.createElement('div');
d.textContent = s;
return d.innerHTML;