xss for client name

pradip-allwyn · Mar 23, 2024 · 21791b6 · 21791b6
1 parent a1e2dd9
commit 21791b6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/htdocs/js/app.js b/htdocs/js/app.js
@@ -39,7 +39,7 @@ app.extend({
 
 		// allow visible app name to be changed in config
 		this.name = config.name;
-		$('#d_header_title').html( '<b>' + this.name + '</b>' );
+		$('#d_header_title').html( '<b>' + filterXSS(this.name) + '</b>' );
 
 		// hit the manager server directly from now on
 		this.setmanagerHostname( resp.manager_hostname );