From eb17d61fc115a3d5cb6087adf46d2ea333548373 Mon Sep 17 00:00:00 2001 From: KernelDeimos Date: Wed, 19 Jun 2024 15:06:25 -0400 Subject: [PATCH] security: address 7018641 --- packages/backend/src/services/PuterHomepageService.js | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/packages/backend/src/services/PuterHomepageService.js b/packages/backend/src/services/PuterHomepageService.js index cdb86a814..f5eff8eaf 100644 --- a/packages/backend/src/services/PuterHomepageService.js +++ b/packages/backend/src/services/PuterHomepageService.js @@ -295,6 +295,7 @@ class PuterHomepageService extends BaseService { }; generate_error_html ({ message }) { + const { encode } = require('html-entities'); return ` @@ -320,7 +321,9 @@ class PuterHomepageService extends BaseService { -

${message}

+

${ + encode(message, { mode: 'nonAsciiPrintable' }) + }

`;