Merge pull request #2676 from thornbill/fix-displaymessage-xss

This commit is contained in:
Anthony Lavado 2021-05-21 00:32:37 -04:00 committed by GitHub
commit 70b41ff005
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -22,7 +22,7 @@ export default function (options) {
const elem = document.createElement('div');
elem.classList.add('toast');
elem.innerHTML = options.text;
elem.textContent = options.text;
document.body.appendChild(elem);