Akash Nimare d69c1339e6 security: Do proper HTML escaping for server data. ...

This commit fixes a security bug which was caused by
using innerHTML and not doing proper HTML escaping.
Ideally, we should be doing proper HTML escaping for
any data we get from the server to avoid XSS attack.
We already handle realm icon and url very well, the
realm description was not handled previously but this commit
now fixes this in a right way.

2018-05-16 18:25:03 +05:30

18 KiB

Raw Blame History

View Raw