Merge pull request #28 from cooljeanius/autofix/alert-26-877fcfc6ef

Fix code scanning alert #26: Client-side cross-site scripting via Copilot Autofix
cooljeanius · Sep 22, 2024 · fedf63d · fedf63d
2 parents ed1f21d + 64a0f46
commit fedf63d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/GhidraDocs/GhidraClass/Intermediate/VersionTracking_withNotes.html b/GhidraDocs/GhidraClass/Intermediate/VersionTracking_withNotes.html
@@ -209,7 +209,7 @@
         this.postMsg(this.views.present, "GET_NOTES");
         this.idx = ~~cursor[0];
         this.step = ~~cursor[1];
-        $("#slideidx").innerHTML = argv[1];
+        $("#slideidx").innerHTML = DOMPurify.sanitize(argv[1]);
         this.postMsg(this.views.future, "SET_CURSOR", this.idx + "." + (this.step + 1));
         if (this.views.remote)
           this.postMsg(this.views.remote, "SET_CURSOR", argv[1]);