Update fontdeck.html DOM text reinterpreted as HTML

django / djangoproject.com

Source code to djangoproject.com

https://www.djangoproject.com/

BSD 3-Clause "New" or "Revised" License

1.86k stars 939 forks source link

Update fontdeck.html DOM text reinterpreted as HTML #1531

Closed Shivam7-1 closed 1 month ago

Shivam7-1 commented 1 month ago

By using innerText, it will avoid the risk of HTML injection, as these properties automatically escape any HTML special characters in the provided text. This helps prevent cross-site scripting (XSS) vulnerabilities by treating the input as plain text rather than interpreted HTML.

Shivam7-1 commented 1 month ago

Hi @bmispelon Could You Please Review This PR Thanks

bmispelon commented 1 month ago

Hi,

We are not interested in these changes you're proposing. Please don't submit more of these search/replace pull requests, and please don't tag maintainers asking for a review after such a short time.

Have a nice day