Possible issuer XSS attack

Levminer · Dec 17, 2021 · 0eb781e · 0eb781e
1 parent e6c0c24
commit 0eb781e
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/app/edit/src/js/index.js b/app/edit/src/js/index.js
@@ -178,7 +178,7 @@ const go = () => {
 		div.innerHTML = `
 		<div id="grid${[counter]}" class="flex flex-col md:w-4/5 lg:w-2/3 mx-auto rounded-2xl bg-gray-800 mb-20">
 		<div class="flex justify-center items-center">
-		<h2>${issuers[counter]}</h2>
+		<h2 id="names${[counter]}">Name</h2>
 		</div>
 		<div class="flex justify-center items-center">
 		<input class="input w-[320px]" type="text" id="edit_inp_${[counter]}" value="${names[counter]}" readonly/>
@@ -201,6 +201,8 @@ const go = () => {
 		div.setAttribute("id", counter)
 		codes_container.appendChild(div)
 
+		document.querySelector(`#names${[counter]}`).textContent = `${issuers[counter]}`
+
 		counter++
 	}
 

diff --git a/app/settings/src/js/shortcuts.js b/app/settings/src/js/shortcuts.js
@@ -494,7 +494,7 @@ const generateCodes = () => {
 		const element = `
 		<div class="flex flex-col md:w-4/5 lg:w-2/3 mx-auto rounded-2xl bg-gray-800 mb-20">
 		<div class="flex justify-center items-center">
-		<h3>${issuers[i]}</h3>
+		<h3 id="issuers${i}">Shortcut</h3>
 		</div>
 		<div class="flex justify-center items-center">
 		<input class="input" disabled type="text" id="qs${i}_input" value="${content}"/>
@@ -517,6 +517,8 @@ const generateCodes = () => {
 		const div = document.createElement("div")
 		div.innerHTML = element
 		document.querySelector(".quick").appendChild(div)
+
+		document.querySelector(`#issuers${i}`).textContent = `${issuers[i]}`
 	}
 }