Deal with some XSS vulnerabilities

micrology · Oct 4, 2024 · 61caadb · 61caadb
1 parent fb42c0f
commit 61caadb
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/js/merge.js b/js/merge.js
@@ -198,7 +198,7 @@ function mergeMaps() {
 
 export function mergeRoom(otherRoom) {
 	openOtherDoc(otherRoom)
-	console.log(`%cMerging map at ${room} (map A) with map at ${otherRoom} (map B)`, 'font-weight: bold')
+	console.log('%cMerging map at %s (map A) with map at %s (map B)', 'font-weight: bold', room, otherRoom)
 	bwsp.on('sync', (status) => {
 		if (!status) return
 		bNodesMap.forEach((n) => bdata.nodes.update(n))
@@ -324,7 +324,7 @@ function diffMaps() {
 }
 export function diffRoom(otherRoom) {
 	openOtherDoc(otherRoom)
-	console.log(`%cComparing map at ${room} (map A) with map at ${otherRoom} (map B)`, 'font-weight: bold')
+	console.log('%cComparing map at %s (map A) with map at %s (map B)', 'font-weight: bold', room, otherRoom)
 	bwsp.on('sync', (status) => {
 		if (!status) return
 		bNodesMap.forEach((n) => bdata.nodes.update(n))

diff --git a/js/prsm.js b/js/prsm.js
@@ -2730,7 +2730,7 @@ function createTitleDropDown() {
 	function makeTitleDropDownEntry(name, room) {
 		let li = document.createElement('li')
 		li.classList.add('room-title')
-		li.innerHTML = name
+		li.textContent = name
 		li.dataset.room = room
 		li.addEventListener('click', (event) => changeRoom(event))
 		selectList.appendChild(li)