🛡️ Sentinel: [HIGH] Fix DOM-based XSS in file upload

Browse Source

- Added `_escapeHtml` helper to sanitize user-controlled file name.
- Used it to sanitize `file.name` before appending it to `row.innerHTML`.
- Applied changes to `frontend/static/js/upload.js`.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

...

This commit is contained in:

google-labs-jules[bot]

2026-05-28 03:10:12 +00:00

parent 6eeb83ea5e

commit 35039c8463

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

Diff Content Not Available