Trying out the XSS-safe approach for puter.print

2026-09-27 07:36:01 +00:00 · 2025-05-21 18:11:51 -07:00
parent bd8d141879
commit 7f699302a4
1 changed files with 2 additions and 1 deletions
@@ -524,7 +524,8 @@ export default window.puter = (function() {

        print = function(...args){
            for(let arg of args){
-                document.body.innerHTML += arg;
+                const textNode = document.createTextNode(arg);
+                document.body.appendChild(textNode);
            }
        }
    }