Fix module library XSS

pandorafms · Oct 31, 2022 · 7bdf103 · 7bdf103
1 parent aae620c
commit 7bdf103
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/pandora_console/include/javascript/module_library.js b/pandora_console/include/javascript/module_library.js
@@ -154,8 +154,10 @@ $(document).ready(function() {
 
         if (selector == "search") {
           $("#search_title_result h2").append(
-            "<span class='pandora_green_text'>" + search_modules + "</span>"
+            "<span class='pandora_green_text' id='search_string'></span>"
           );
+
+          $("#search_string").text(search_modules);
         }
 
         if (total_posts < 1) {