Freeroam extended XSS fix

altmp · Sep 21, 2023 · c83d296 · c83d296
1 parent 4389864
commit c83d296
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/freeroam-extended/client/html/app.js b/freeroam-extended/client/html/app.js
@@ -15,6 +15,8 @@ if (window.alt === undefined) {
 }
 
 function colorify(text) {
+  if (text && typeof text === 'string') text = text.replace(/[<>]/g, '');
+
   let matches = [];
   let m = null;
   let curPos = 0;