fix: [security] XSS in event-graph relationship tooltip

2023-03-10 11:11:13 +01:00 · 2023-03-10 11:11:13 +01:00 · 78f423451a
parent 30255b8d68
commit 78f423451a
1 changed files with 1 additions and 1 deletions
--- a/app/webroot/js/event-graph.js
+++ b/app/webroot/js/event-graph.js
@ -822,7 +822,7 @@ class EventGraph {
                from: rel.from,
                to: rel.to,
                label: rel.type,
-                title: rel.comment,
+                title: escapeHtml(rel.comment),
                color: {
                    opacity: 1.0,
                }