Ver Fonte

security: address 7018641

KernelDeimos há 11 meses atrás
pai
commit
eb17d61fc1
1 ficheiros alterados com 4 adições e 1 exclusões
  1. 4 1
      packages/backend/src/services/PuterHomepageService.js

+ 4 - 1
packages/backend/src/services/PuterHomepageService.js

@@ -295,6 +295,7 @@ class PuterHomepageService extends BaseService {
     };
     };
     
     
     generate_error_html ({ message }) {
     generate_error_html ({ message }) {
+        const { encode } = require('html-entities');
         return `
         return `
             <!DOCTYPE html>
             <!DOCTYPE html>
             <html>
             <html>
@@ -320,7 +321,9 @@ class PuterHomepageService extends BaseService {
                     </style>
                     </style>
                 </head>
                 </head>
                 <body>
                 <body>
-                    <h1>${message}</h1>
+                    <h1>${
+                        encode(message, { mode: 'nonAsciiPrintable' })
+                    }</h1>
                 </body>
                 </body>
             </html>
             </html>
         `;
         `;