Skip to content

updateMessage: Do not set via innerHTML #2

Description

@Mitmischer

See chrome/content/popup.js: line 283.

The inserted string is read from chrome/locale/[lang]/translator.properties and contains html - that is a security risk.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions