Reject malformed notification feeds before state changes
This commit is contained in:
+1
-1
@@ -76,6 +76,6 @@ export function tenderDigestHtml({ name, tenders }) {
|
||||
</div>`;
|
||||
}
|
||||
|
||||
function escapeHtml(s) {
|
||||
export function escapeHtml(s) {
|
||||
return String(s).replace(/[&<>"']/g, (c) => ({ '&': '&', '<': '<', '>': '>', '"': '"', "'": ''' }[c]));
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user