Fix file field xss

instantsoft · Aug 15, 2023 · a6a30e7 · a6a30e7
1 parent ca5f150
commit a6a30e7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/modern/js/files.js b/templates/modern/js/files.js
@@ -6,7 +6,7 @@ icms.files = (function ($) {
 
     this.onDocumentReady = function(){
         $('.custom-file-input').on('change',function(){
-            $(this).next('.custom-file-label').html($(this).val().replace('C:\\fakepath\\', ''));
+            $(this).next('.custom-file-label').text($(this).val().replace('C:\\fakepath\\', ''));
         });
     };