Skip to content
Permalink
Browse files Browse the repository at this point in the history
Merge pull request from GHSA-qgh4-95j7-p3vj
Do not append data as html, use text function instead
  • Loading branch information
matks committed Jun 29, 2020
2 parents 8833d95 + 073bb92 commit bac749b
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions admin-dev/themes/default/js/bundle/product/form.js
Expand Up @@ -1339,7 +1339,7 @@ var imagesProduct = (function() {
success: function(file, response) {
//manage error on uploaded file
if (response.error !== 0) {
errorElem.append('<p>' + file.name + ': ' + response.error + '</p>');
errorElem.append($('<p></p>').text(file.name + ': ' + response.error));
this.removeFile(file);
return;
}
Expand Down Expand Up @@ -1368,7 +1368,7 @@ var imagesProduct = (function() {
}

//append new error
errorElem.append('<p>' + file.name + ': ' + message + '</p>');
errorElem.append($('<p></p>').text(file.name + ': ' + message));

//remove uploaded item
this.removeFile(file);
Expand Down

0 comments on commit bac749b

Please sign in to comment.