Fix DOM text reinterpreted as HTML

See: https://github.com/camptocamp/ngeo/security/code-scanning/24 https://github.com/camptocamp/ngeo/security/code-scanning/25 https://github.com/camptocamp/ngeo/security/code-scanning/41
camptocamp · Sep 17, 2024 · 3c7214f · 3c7214f
1 parent 48fd9b1
commit 3c7214f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/import/importdatasourceComponent.js b/src/import/importdatasourceComponent.js
@@ -254,7 +254,7 @@ export class Controller {
       if (this.file) {
         this.hasError = false;
         // update the label
-        $(fileInput).next('.custom-file-label').html(this.fileNameAndSize);
+        $(fileInput).next('.custom-file-label').text(this.fileNameAndSize);
       }
       this.scope_.$apply();
     });

diff --git a/src/mobile/navigation/component.js b/src/mobile/navigation/component.js
@@ -177,7 +177,7 @@ Controller.prototype.init = function (element) {
     if (!datatarget) {
       throw new Error('Missing datatarget');
     }
-    const slideIn = $(datatarget);
+    const slideIn = $.find(datatarget);
     if (slideIn.length != 1) {
       throw new Error('Wrong slideIn');
     }