Fix: Possible XSS in Filename (#23)

Remove File Name in Window Title
corona-warn-app · May 7, 2021 · d004a19 · d004a19
1 parent 87e0385
commit d004a19
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/main/resources/static/js/file_viewer.js b/src/main/resources/static/js/file_viewer.js
@@ -65,7 +65,7 @@ async function showFile(file, statusElement) {
             contentSize: "500 500",
             position: "left-top 30 20",
             content: divNative,
-            headerTitle: "<span style='font-variant: initial; font-family: \"Telegrotesk Next Regular\";'>" + file.filename + "</span>",
+            headerTitle: "<span style='font-variant: initial; font-family: \"Telegrotesk Next Regular\";'>Bilddatei</span>",
             theme: "#e20074",
         });
 
@@ -85,7 +85,7 @@ async function showFile(file, statusElement) {
             contentSize: "800 500",
             position: "left-top 30 20",
             content: divNative,
-            headerTitle: "<span style='font-variant: initial; font-family: \"Telegrotesk Next Regular\";'>" + file.filename + "</span>",
+            headerTitle: "<span style='font-variant: initial; font-family: \"Telegrotesk Next Regular\";'>Textdatei</span>",
             theme: "#e20074",
             callback: (panel) => {
                 console.log(panel);