Fix code scanning alert issue-OWASP-BLT#1346

JisanAR03 · Oct 25, 2023 · f060432 · f060432
1 parent ffee730
commit f060432
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/website/templates/hunt_submittion.html b/website/templates/hunt_submittion.html
@@ -199,12 +199,18 @@ <h1 class="title">Report a bug</h1>
   {% endif %}
 </table>
 <script type="text/javascript">
+  function sanitizeInput(input) {
+    var div = document.createElement('div');
+    div.appendChild(document.createTextNode(input));
+    return div.innerHTML;
+  }
   $(function () {
     $('button[name="test_files"]').on('click', function () {
       $(this).parent().find('input[type=file]').click();
     });
     $('input[name="screenshot"]').on('change', function () {
       var file = $(this).val().replace('C:\\fakepath\\', '');
+      file = sanitizeInput(file);
       $(this).parent().find('.badge').html(file);
     });
     $(".duplicates").click(function () {