Archives/convergencelabs_monaco-collab-ext
1
0
Fork 0
mirror of https://github.com/convergencelabs/monaco-collab-ext.git synced 2024-10-27 20:34:17 +00:00
Code Issues Projects Releases Wiki Activity

fix: prevent XSS in tooltip label

Browse Source
This commit is contained in:
Loïc Mangeonjean 2022-09-15 10:28:11 +02:00
parent cdefbb151f
commit e37ce9b99c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/ts/RemoteCursorWidget.ts
View File

@ -75,7 +75,7 @@ export class RemoteCursorWidget implements editor.IContentWidget, IDisposable {
this._tooltipNode = document.createElement("div"); this._tooltipNode = document.createElement("div");
this._tooltipNode.className = classNames('monaco-remote-cursor-tooltip', tooltipClassName) this._tooltipNode.className = classNames('monaco-remote-cursor-tooltip', tooltipClassName)
this._tooltipNode.style.background = color; this._tooltipNode.style.background = color;
this._tooltipNode.innerHTML = label; this._tooltipNode.innerText = label;
this._domNode.appendChild(this._tooltipNode); this._domNode.appendChild(this._tooltipNode);
// we only need to listen to scroll positions to update the // we only need to listen to scroll positions to update the