From 91945fcd4980f917dc41e281ee48f5b5dad37d38 Mon Sep 17 00:00:00 2001
From: Ronald Moesbergen <rmoesbergen@users.noreply.github.com>
Date: Fri, 5 Jan 2024 18:16:44 +0100
Subject: [PATCH] fix: fix xss issue

---
 templates/edit_member.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/edit_member.html b/templates/edit_member.html
index 5334ac9..f90df07 100644
--- a/templates/edit_member.html
+++ b/templates/edit_member.html
@@ -87,7 +87,7 @@
                         </div>
                         <div class="custom-file" id="customFile" lang="es">
                             <input type="file" class="custom-file-input" id="id_foto" name="foto"
-                                   onchange="$(this).next('.custom-file-label').html($(this).val().split('\\').pop());">
+                                   onchange="$(this).next('.custom-file-label').text($(this).val().split('\\').pop());">
                             <label class="custom-file-label" for="id_foto">
                                Foto uploaden...
                             </label>