From 8fe1b3b9e0e2c333856dc166c8c3c7d2027c856d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thomas=20J=C3=A4ckle?= <thomas.jaeckle@beyonnex.io>
Date: Fri, 17 May 2024 17:05:07 +0200
Subject: [PATCH] sanitize an additional input which was still missing
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Thomas Jäckle <thomas.jaeckle@beyonnex.io>
---
 ui/modules/utils.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ui/modules/utils.ts b/ui/modules/utils.ts
index 0e6ff76aee..816f084642 100644
--- a/ui/modules/utils.ts
+++ b/ui/modules/utils.ts
@@ -165,8 +165,8 @@ export function addDropDownEntries(target: HTMLUListElement, labels: Array<Strin
 export function addDropDownEntry(target: HTMLUListElement, label: String, isHeader: boolean = false, value?: String) {
   const li = document.createElement('li');
   li.innerHTML = isHeader ?
-    `<h6 class="dropdown-header" data-value='${value}'>${label}</h6>` :
-    `<a class="dropdown-item" data-value='${value}'>${label}</a>`;
+    `<h6 class="dropdown-header" data-value='${value}'>${sanitizeHTML(label)}</h6>` :
+    `<a class="dropdown-item" data-value='${value}'>${sanitizeHTML(label)}</a>`;
   target.appendChild(li);
 }