Properly escaping name in discussion manager

2021-06-07 10:42:08 +02:00 · 2021-06-07 10:42:08 +02:00 · ac911cff4b
parent 6b8ef48e7f
commit ac911cff4b
1 changed files with 2 additions and 0 deletions
--- a/front/src/WebRtc/DiscussionManager.ts
+++ b/front/src/WebRtc/DiscussionManager.ts
@ -171,6 +171,8 @@ export class DiscussionManager {
        const date = new Date();
        if(isMe){
            name = 'Me';
+        } else {
+            name = HtmlUtils.escapeHtml(name);
        }
        pMessage.innerHTML = `<span style="font-weight: bold">${name}</span>    
                    <span style="color:#bac2cc;display:inline-block;font-size:12px;">