Fix possible Xscript exploit

This commit is contained in:
Griatch 2025-06-30 17:20:37 +02:00
parent 867b8c68cf
commit da8df981cb

View file

@ -52,8 +52,8 @@ let spawns = (function () {
// //
// display a row with proper editting hooks // display a row with proper editting hooks
var displayRow = function (formdiv, div, regexstring, tagstring) { var displayRow = function (formdiv, div, regexstring, tagstring) {
var regex = $('<input class="regex" type=text value="'+regexstring+'"/>'); var regex = $.find('<input class="regex" type=text value="'+regexstring+'"/>');
var tag = $('<input class="tag" type=text value="'+tagstring+'"/>'); var tag = $.find('<input class="tag" type=text value="'+tagstring+'"/>');
var del = $('<input class="delete-regex" type=button value="X"/>'); var del = $('<input class="delete-regex" type=button value="X"/>');
regex.on('change', onAlterTag ); regex.on('change', onAlterTag );
regex.on('focusin', onFocusIn ); regex.on('focusin', onFocusIn );