From bc71e75d5f3e2a2e977bdf86101e917ae15b0e23 Mon Sep 17 00:00:00 2001
From: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 06:13:59 +0000
Subject: [PATCH] 🔒 fix XSS vulnerability in gitalk.html by replacing innerHTML with textContent
---
layouts/partials/comments/gitalk.html | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/layouts/partials/comments/gitalk.html b/layouts/partials/comments/gitalk.html
index 2c61f83..fc74117 100644
--- a/layouts/partials/comments/gitalk.html
+++ b/layouts/partials/comments/gitalk.html
@@ -24,7 +24,7 @@
});
(function () {
if (['localhost', '127.0.0.1'].indexOf(window.location.hostname) != -1) {
- document.getElementById('gitalk-container').innerHTML =
+ document.getElementById('gitalk-container').textContent =
'Gitalk comments not available by default when the website is previewed locally.';
return;
}
--
Gitblit v1.10.0