From 2289d61d3c5d33af687c9bb2852382b8f3e1ff02 Mon Sep 17 00:00:00 2001
From: jelveh <nj@puter.com>
Date: Wed, 6 May 2026 15:33:13 -0700
Subject: [PATCH] Update UIPrompt.js

---
 src/gui/src/UI/UIPrompt.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/gui/src/UI/UIPrompt.js b/src/gui/src/UI/UIPrompt.js
index e271d5521..bf284e47e 100644
--- a/src/gui/src/UI/UIPrompt.js
+++ b/src/gui/src/UI/UIPrompt.js
@@ -44,10 +44,10 @@ function UIPrompt (options) {
 
         let h = '';
         // message
-        h += `<div class="window-prompt-message">${options.message}</div>`;
+        h += `<div class="window-prompt-message">${html_encode(options.message)}</div>`;
         // prompt
         h += '<div class="window-alert-prompt" style="margin-top: 20px;">';
-        h += `<input type="text" class="prompt-input" placeholder="${options.placeholder ?? ''}" value="${options.defaultValue ?? options.value ?? ''}">`;
+        h += `<input type="text" class="prompt-input" placeholder="${html_encode(options.placeholder ?? '')}" value="${html_encode(options.defaultValue ?? options.value ?? '')}">`;
         h += '</div>';
         // buttons
         if ( options.buttons && options.buttons.length > 0 ) {