Fix XSS in uploadFailedSecond default case with escapeHtml
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -402,7 +402,7 @@ export async function uploadFailedSecond(detail) {
|
||||
key = "Status";
|
||||
break;
|
||||
default:
|
||||
key = i.loc[2];
|
||||
key = escapeHtml(String(i.loc[2]));
|
||||
break;
|
||||
}
|
||||
content = `<li>Data missing in ${key} Column: (Row #${i.loc[1]})</li>`;
|
||||
|
||||
Reference in New Issue
Block a user