fixed potential XSS in registration form

10 years ago · aa6137b9c3
parent c18de5cdd2
commit aa6137b9c3
1 changed files with 1 additions and 1 deletions
--- a/public/src/client/register.js
+++ b/public/src/client/register.js
@ -146,7 +146,7 @@ define('forum/register', function() {
 		});

 		username.on('keyup', function() {
-			$('#yourUsername').html(this.value.length > 0 ? this.value : 'username');
+			$('#yourUsername').text(this.value.length > 0 ? this.value : 'username');
 		});

 		username.on('blur', function() {