Update frontend.ts DOM text reinterpreted as HTML {Patch}

google / neuroglancer

WebGL-based viewer for volumetric data

Apache License 2.0

1.02k stars 283 forks source link

Update frontend.ts DOM text reinterpreted as HTML {Patch} #573

Closed Shivam7-1 closed 2 months ago

Shivam7-1 commented 2 months ago

By using innerText, it will avoid the risk of HTML injection, as these properties automatically escape any HTML special characters in the provided text. This helps prevent cross-site scripting (XSS) vulnerabilities by treating the input as plain text rather than interpreted HTML. Always be cautious when dealing with user input or dynamic content to prevent security risks

Shivam7-1 commented 2 months ago

Hi @jbms Could You Please Review Above PR Thanks

Shivam7-1 commented 2 months ago

Hi @jbms Could You Please Review Above PR Thanks

Shivam7-1 commented 2 months ago

Hi @jbms I noticed my PR was closed. Could you please provide some feedback on why it was closed? I'm eager to learn and improve. Thank you