search

Mobius1 / Selectr

A lightweight, vanilla javascript select box replacement. No dependencies.
MIT License
313 stars 77 forks source link

More XSS Fixes #121

Closed adrian-enspired closed 5 years ago

adrian-enspired commented 5 years ago

Found a few more instances where textContent was inadvertently transformed into HTML.

Sorry for the continuing updates... I'm pretty sure this is all of them. Suggest releasing 2.4.11 once this is merged.