Fix security issues

2022-11-25 11:40:11 -05:00
parent 76d0720727
commit 1b3cfd6726
3 changed files with 29 additions and 6 deletions
--- a/zefie_wtvp_minisrv/ServiceVault/wtv-mail/listmail.js
+++ b/zefie_wtvp_minisrv/ServiceVault/wtv-mail/listmail.js
@@ -302,7 +302,7 @@ ${message_font_close}
 <td abswidth=5>
 <td abswidth=225 maxlines=1>
 ${message_font_open}
-${(message.subject) ? message.subject : "(No Subject)"}
+${(message.subject) ? wtvshared.htmlEntitize(message.subject) : "(No Subject)"}
 ${message_font_close}
 <td abswidth=5>
 <td abswidth=47 maxlines=1>