security: address 7018641

2026-08-22 22:17:01 +00:00 · 2024-06-19 15:17:58 -04:00
parent bfd896041e
commit eb17d61fc1
1 changed files with 4 additions and 1 deletions
@@ -295,6 +295,7 @@ class PuterHomepageService extends BaseService {
    };
    
    generate_error_html ({ message }) {
+        const { encode } = require('html-entities');
        return `
            <!DOCTYPE html>
            <html>
@@ -320,7 +321,9 @@ class PuterHomepageService extends BaseService {
                    </style>
                </head>
                <body>
-                    <h1>${message}</h1>
+                    <h1>${
+                        encode(message, { mode: 'nonAsciiPrintable' })
+                    }</h1>
                </body>
            </html>
        `;