1
0
mirror of https://github.com/convergencelabs/monaco-collab-ext.git synced 2024-10-27 20:34:17 +00:00

fix: prevent XSS in tooltip label

This commit is contained in:
Loïc Mangeonjean 2022-09-15 10:28:11 +02:00
parent cdefbb151f
commit e37ce9b99c

View File

@ -75,7 +75,7 @@ export class RemoteCursorWidget implements editor.IContentWidget, IDisposable {
this._tooltipNode = document.createElement("div");
this._tooltipNode.className = classNames('monaco-remote-cursor-tooltip', tooltipClassName)
this._tooltipNode.style.background = color;
this._tooltipNode.innerHTML = label;
this._tooltipNode.innerText = label;
this._domNode.appendChild(this._tooltipNode);
// we only need to listen to scroll positions to update the