sanitize an additional input which was still missing

Signed-off-by: Thomas Jäckle <thomas.jaeckle@beyonnex.io>
eclipse-ditto · May 17, 2024 · 9d1bac3 · 9d1bac3
1 parent cce2e96
commit 9d1bac3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/ui/modules/utils.ts b/ui/modules/utils.ts
@@ -144,8 +144,8 @@ export function addDropDownEntries(target, items, isHeader = false) {
   items.forEach((value) => {
     const li = document.createElement('li');
     li.innerHTML = isHeader ?
-        `<h6 class="dropdown-header">${value}</h6>` :
-        `<a class="dropdown-item" href="#">${value}</a>`;
+        `<h6 class="dropdown-header">${sanitizeHTML(value)}</h6>` :
+        `<a class="dropdown-item" href="#">${sanitizeHTML(value)}</a>`;
     target.appendChild(li);
   });
 }