solved cross-site scripting:DOM issue

MicroFocus · Jun 27, 2024 · dd9d340 · dd9d340
1 parent 6687f95
commit dd9d340
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/media/edit-service.js b/media/edit-service.js
@@ -159,7 +159,7 @@
     }
 
     function addOptionsForSelect(options, field, selectedName) {
-        let fieldName = field[0].name;
+        let fieldName = $.escapeSelector(field[0].name);
         let select = $('#' + fieldName);
         let html = ``;
         select.html(html);
@@ -205,7 +205,7 @@
     }
 
     function addOptionsForMultipleSelect(options, field, selected) {
-        let fieldName = field[0].name;
+        let fieldName = $.escapeSelector(field[0].name);
         let select = $('#' + fieldName);
         let html = ``;
         select.html(html);