Properly escape HTML entities in sampleDelim to avoid XSS issue (#2307)
This commit is contained in:
@@ -99,7 +99,7 @@ class OffsetChecker extends Operation {
|
||||
}
|
||||
}
|
||||
|
||||
return outputs.join(sampleDelim);
|
||||
return outputs.join(Utils.escapeHtml(sampleDelim));
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user