From b68873c5f4862a7931b65a230ec5d3f52ccd49db Mon Sep 17 00:00:00 2001
From: KernelDeimos <eric.alex.dube@gmail.com>
Date: Thu, 16 May 2024 12:48:57 -0400
Subject: [PATCH] Fix 8688grpf1

---
 src/UI/Components/Slider.js | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/UI/Components/Slider.js b/src/UI/Components/Slider.js
index 26308048f..18281d80d 100644
--- a/src/UI/Components/Slider.js
+++ b/src/UI/Components/Slider.js
@@ -81,9 +81,15 @@ export default class Slider extends Component {
         $(template).html(/*html*/`
             <div class="slider">
                 <label class="slider-label">${html_encode(label)}</label>
-                <input class="slider-input" type="range" min="${min}" max="${max}" value="${value}" step="${step}">
+                <input class="slider-input" type="range">
             </div>
         `);
+
+        // Set attributes here to prevent XSS injection
+        $(template).find('.slider-input').attr('min', min);
+        $(template).find('.slider-input').attr('max', max);
+        $(template).find('.slider-input').attr('value', value);
+        $(template).find('.slider-input').attr('step', step);
     }
 
     on_ready ({ listen }) {