Fix XSS in uploadFailedSecond default case with escapeHtml

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
2026-03-09 14:10:16 +08:00
parent b58659295b
commit 2a2eeabac7

View File

@@ -402,7 +402,7 @@ export async function uploadFailedSecond(detail) {
key = "Status"; key = "Status";
break; break;
default: default:
key = i.loc[2]; key = escapeHtml(String(i.loc[2]));
break; break;
} }
content = `<li>Data missing in ${key} Column: (Row #${i.loc[1]})</li>`; content = `<li>Data missing in ${key} Column: (Row #${i.loc[1]})</li>`;