Altarik/Launcher
4
0
Fork 0
mirror of https://github.com/AltarikMC/Launcher synced 2024-11-22 06:19:50 +01:00
Code

fix possible xss exploit with innerHTML

Browse Source
This commit is contained in:
Quentin Legot 2021-07-01 20:54:10 +02:00
parent c53c789122
commit 3b983f12ce
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/client/assets/js/index.js
View File

@ -21,9 +21,9 @@ document.body.onload = () => {
minMem.max = totalMem minMem.max = totalMem
maxMem.max = totalMem maxMem.max = totalMem
minMem.value = localStorage.getItem("minMem") != null ? localStorage.getItem("minMem") : 1024 minMem.value = localStorage.getItem("minMem") != null ? localStorage.getItem("minMem") : 1024
outputMinMem.innerHTML = minMem.value outputMinMem.textContent = minMem.value
maxMem.value = localStorage.getItem("maxMem") != null ? localStorage.getItem("maxMem") : 2048 maxMem.value = localStorage.getItem("maxMem") != null ? localStorage.getItem("maxMem") : 2048
outputMaxMem.innerHTML = maxMem.value outputMaxMem.textContent = maxMem.value
demandModsInformations() demandModsInformations()
} }
@ -134,10 +134,10 @@ disconnectBtn.addEventListener('click', e => {
ipcRenderer.send('disconnect') ipcRenderer.send('disconnect')
}) })
minMem.addEventListener("input", (e) => { minMem.addEventListener("input", e => {
outputMinMem.innerHTML = e.target.value outputMinMem.textContent = e.target.value
}) })
maxMem.addEventListener("input", (e) => { maxMem.addEventListener("input", e => {
outputMaxMem.innerHTML = e.target.value outputMaxMem.textContent = e.target.value
}) })