ken/muxplex
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: remove escapeHtml() from textContent assignment on view label

Browse Source 
textContent is inherently XSS-safe and does not interpret HTML entities.
Wrapping with escapeHtml() caused literal entity strings (e.g., &)
to display instead of the intended characters (e.g., &) for view names
containing special characters like &, <, or >.

Generated with Amplifier

Co-Authored-By: Amplifier <240397093+microsoft-amplifier@users.noreply.github.com>
This commit is contained in:
Brian Krabach
2026-04-15 17:54:39 -07:00
parent 9afa4b2347
commit 9180fbbfa9
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
muxplex/frontend/app.js
+1 -1
View File
@@ -859,7 +859,7 @@ function renderViewDropdown() {
} else if (_activeView === 'hidden') { } else if (_activeView === 'hidden') {
label.textContent = 'Hidden'; label.textContent = 'Hidden';
} else { } else {
label.textContent = escapeHtml(_activeView); label.textContent = _activeView;
} }
} }
} }