mirror of https://github.com/lxndrblz/anatole.git

google-labs-jules[bot]
5 hours ago bc71e75d5f3e2a2e977bdf86101e917ae15b0e23
🔒 fix XSS vulnerability in gitalk.html by replacing innerHTML with textContent

Co-authored-by: KarelZe <12801659+KarelZe@users.noreply.github.com>
1 files modified
2 ■■■■■ changed files
layouts/partials/comments/gitalk.html 2 ●●●●● patch | view | raw | blame | history
layouts/partials/comments/gitalk.html
@@ -24,7 +24,7 @@
  });
  (function () {
    if (['localhost', '127.0.0.1'].indexOf(window.location.hostname) != -1) {
      document.getElementById('gitalk-container').innerHTML =
      document.getElementById('gitalk-container').textContent =
        'Gitalk comments not available by default when the website is previewed locally.';
      return;
    }