Update changelog and html rendering.

2026-05-05 05:33:36 +00:00 · 2026-03-21 07:01:42 +01:00
parent 7c09278c8e
commit 266cd7d8d0
2 changed files with 10 additions and 2 deletions
--- a/resources/assets/v2/src/support/renderers/GenericObjectRenderer.js
+++ b/resources/assets/v2/src/support/renderers/GenericObjectRenderer.js
@@ -20,6 +20,14 @@

 export default class GenericObjectRenderer {
    renderUrl(url, title, text) {
-        return `<a href="${url}" title="${title}">${text}</a>`;
+        return `<a href="${url}" title="${this.escapeHtml(title)}">${this.escapeHtml(text)}</a>`;
    }
+    escapeHtml(unsafe) {
+        return unsafe
+            .replaceAll("&", "&amp;")
+            .replaceAll("<", "&lt;")
+            .replaceAll(">", "&gt;")
+            .replaceAll('"', "&quot;")
+            .replaceAll("'", "&#039;");
+    };
 }