fix: sanitize dialog title

owncloud · Jan 30, 2024 · 1caa7b4 · 1caa7b4
1 parent ced64df
commit 1caa7b4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/js/jquery.ocdialog.js b/core/js/jquery.ocdialog.js
@@ -75,7 +75,7 @@
 						this.$title.text(value);
 					} else {
 						var $title = $('<h3 class="oc-dialog-title">' +
-							value +
+							escapeHTML(value) +
 							'</h3>');
 						this.$title = $title.prependTo(this.$dialog);
 					}