sanitize an additional input which was still missing

Signed-off-by: Thomas Jäckle <thomas.jaeckle@beyonnex.io>
eclipse-ditto · May 17, 2024 · 8fe1b3b · 8fe1b3b
1 parent 20399a0
commit 8fe1b3b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/ui/modules/utils.ts b/ui/modules/utils.ts
@@ -165,8 +165,8 @@ export function addDropDownEntries(target: HTMLUListElement, labels: Array<Strin
 export function addDropDownEntry(target: HTMLUListElement, label: String, isHeader: boolean = false, value?: String) {
   const li = document.createElement('li');
   li.innerHTML = isHeader ?
-    `<h6 class="dropdown-header" data-value='${value}'>${label}</h6>` :
-    `<a class="dropdown-item" data-value='${value}'>${label}</a>`;
+    `<h6 class="dropdown-header" data-value='${value}'>${sanitizeHTML(label)}</h6>` :
+    `<a class="dropdown-item" data-value='${value}'>${sanitizeHTML(label)}</a>`;
   target.appendChild(li);
 }