fix: xss vulnerability on renderError

rpvos · Jul 29, 2020 · 0833e85 · 0833e85
1 parent 3c7220e
commit 0833e85
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/utils.js b/src/utils.js
@@ -13,7 +13,7 @@ const renderError = (message, secondaryMessage = "") => {
     <rect x="0.5" y="0.5" width="494" height="99%" rx="4.5" fill="#FFFEFE" stroke="#E4E2E2"/>
     <text x="25" y="45" class="text">Something went wrong! file an issue at https://git.io/JJmN9</text>
     <text data-testid="message" x="25" y="55" class="text small">
-      <tspan x="25" dy="18">${message}</tspan>
+      <tspan x="25" dy="18">${encodeHTML(message)}</tspan>
       <tspan x="25" dy="18"  class="gray">${secondaryMessage}</tspan>
     </text>
     </svg>