#nosec to silence false positive

This commit is contained in:
Ryan
2025-05-14 07:05:35 -04:00
committed by GitHub
parent 1add160f5d
commit 13aa011632

View File

@@ -348,6 +348,7 @@ export async function openUserPanel() {
const f = this.files[0];
if (!f) return;
// preview immediately
// #nosec
img.src = URL.createObjectURL(f);
const blobUrl = URL.createObjectURL(f);
// use setAttribute + encodeURI to avoid “DOM text reinterpreted as HTML” alerts