fix: potential for XSS here

5 years ago · 40f131a6bb
parent 7a0f607434
commit 40f131a6bb
1 changed files with 1 additions and 0 deletions
--- a/public/src/utils.js
+++ b/public/src/utils.js
@ -691,6 +691,7 @@
 		},

 		urlToLocation: function (url) {
+			url = encodeURI(url);
 			return $('<a href="' + url + '" />')[0];
 		},