sanitize function

IGS · Dec 13, 2023 · 2e95419 · 2e95419
1 parent 5f2d9d6
commit 2e95419
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/www/js/gene_collection_manager.js b/www/js/gene_collection_manager.js
@@ -1103,6 +1103,9 @@ const setupPagination = (pagination) => {
  * @returns {void}
  */
 const showGcActionNote = (gcId, shareUrl) => {
+    // sanitize shareUrl
+    shareUrl = shareUrl.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+
     const noteSelector = `#result_gc_id_${gcId} span.js-gc-action-note`;
     const noteSelecterElt = document.querySelector(noteSelector);