fix(web): protect against XSS in test description

See smartystreets#684
srabraham · Feb 8, 2024 · eff725c · eff725c
1 parent 6367023
commit eff725c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/web/client/index.html b/web/client/index.html
@@ -294,7 +294,7 @@
 						</div>
 					{{if _path|notempty}}
 						{{_path}}
-							<div class="story-links{{if Depth|more>-1}} depth-{{Depth}}{{/if}}"><a href="#test-{{_id}}">{{Title}}</a></div>
+							<div class="story-links{{if Depth|more>-1}} depth-{{Depth}}{{/if}}"><a href="#test-{{_id}}">{{Title|htmlSafe|ansiColours}}</a></div>
 						{{/_path}}
 					{{/if}}
 							{{if StackTrace|notempty}}<div class="depth-{{_maxDepth}} panic-summary">{{Error}}</div>{{/if}}
@@ -328,7 +328,7 @@
 									</div>
 							{{if _path|notempty}}
 								{{_path}}
-									<div class="story-links{{if Depth|more>-1}} depth-{{Depth}}{{/if}}"><a href="#test-{{_id}}">{{Title}}</a></div>
+									<div class="story-links{{if Depth|more>-1}} depth-{{Depth}}{{/if}}"><a href="#test-{{_id}}">{{Title|htmlSafe|ansiColours}}</a></div>
 								{{/_path}}
 							{{/if}}
 								</div>