refactor: enhance security for rendering followed actors list

hyphacoop · Mar 20, 2024 · 5f6bd3f · 5f6bd3f
1 parent 9fcefbe
commit 5f6bd3f
Showing 1 changed file with 9 additions and 6 deletions.
diff --git a/followed-accounts.js b/followed-accounts.js
@@ -11,12 +11,15 @@ class FollowedActorsList extends HTMLElement {
 
   async renderFollowedActors () {
     const followedActors = await db.getFollowedActors()
-    this.innerHTML = followedActors
-      .map((actor) => {
-        const formattedDate = this.formatDate(actor.followedAt)
-        return `<div>- Followed URL: ${actor.url} - Followed At: ${formattedDate}</div>`
-      })
-      .join('')
+    this.innerHTML = ''
+    followedActors.forEach(actor => {
+      const actorElement = document.createElement('div')
+      const formattedDate = this.formatDate(actor.followedAt)
+
+      actorElement.innerText = `- Followed URL: ${actor.url} - Followed At: ${formattedDate}`
+
+      this.appendChild(actorElement)
+    })
   }
 
   formatDate (dateString) {