fix: fix xss issue

djoamersfoort · Jan 5, 2024 · 91945fc · 91945fc
1 parent 29a71e1
commit 91945fc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/edit_member.html b/templates/edit_member.html
@@ -87,7 +87,7 @@
                         </div>
                         <div class="custom-file" id="customFile" lang="es">
                             <input type="file" class="custom-file-input" id="id_foto" name="foto"
-                                   onchange="$(this).next('.custom-file-label').html($(this).val().split('\\').pop());">
+                                   onchange="$(this).next('.custom-file-label').text($(this).val().split('\\').pop());">
                             <label class="custom-file-label" for="id_foto">
                                Foto uploaden...
                             </label>