security: (sample) Resolve XSS issue in external webview page

rakutentech · Feb 4, 2021 · ff52cd2 · ff52cd2
1 parent cd60ab7
commit ff52cd2
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/js-miniapp-sample/external-webview/index.html b/js-miniapp-sample/external-webview/index.html
@@ -101,7 +101,9 @@ <h3>Return To Mini App</h3>
                 const passedParams = window.location.search
                     // This page is loaded via a query parameter so we must remove the section which isn't relevant
                     .replace(/^[?](.*?)[?]/, '?'); 
-                document.getElementById('PassedParams').innerHTML = passedParams || 'None';
+                const text = document.createElement('span');
+                text.innerText = passedParams || 'None';
+                document.getElementById('PassedParams').appendChild(text);
 
                 // Set return URL and params
                 const returnInput = document.getElementById('ReturnInput');