troyhunt / password-purgatory

Deliberately making password creation a true hell
157 stars 14 forks source link

Changed usage of innerHTML to textContent #12

Closed chrishardinge closed 2 years ago

chrishardinge commented 2 years ago

Just a small change to avoid XSS - not that you'll be returning any malicious payloads 😉

troyhunt commented 2 years ago

Good one! Yeah, it's effectively static data from my own code, but this is better 🙂