v1.0.176: XSS ×5 fix + syncDB await + escHtml(null)
This commit is contained in:
@@ -86,6 +86,7 @@ window.closeAbout = closeAbout;
|
||||
* Используется в истории промптов.
|
||||
*/
|
||||
function escHtml(s) {
|
||||
if (s == null) return '';
|
||||
var d = document.createElement('div');
|
||||
d.textContent = s;
|
||||
return d.innerHTML;
|
||||
|
||||
Reference in New Issue
Block a user