From b4e066bf2d1a8023239692104afdfdfc84ff29df Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 7 Feb 2026 20:58:23 +0000
Subject: [PATCH] Security fix: Use JSON serialization for template variable in
 JavaScript

- Fixed XSS vulnerability in file detail template
- Use tojson filter to safely encode file.id into JavaScript
- CodeQL scan confirms no security issues

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
---
 frontend/templates/file_detail.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/templates/file_detail.html b/frontend/templates/file_detail.html
index dcae4510..00aadf2f 100644
--- a/frontend/templates/file_detail.html
+++ b/frontend/templates/file_detail.html
@@ -210,7 +210,7 @@
   <script>
     // JavaScript for handling retry functionality
     async function reprocessFile() {
-      const fileId = {{ file.id }};
+      const fileId = {{ file.id | tojson }};
       const button = document.getElementById('reprocess-btn');
       const statusDiv = document.getElementById('reprocess-status');