From 13aa0116329828976349f0358f6c24c91b69d8c8 Mon Sep 17 00:00:00 2001 From: Ryan Date: Wed, 14 May 2025 07:05:35 -0400 Subject: [PATCH] #nosec to silence false positive --- public/js/authModals.js | 1 + 1 file changed, 1 insertion(+) diff --git a/public/js/authModals.js b/public/js/authModals.js index d7067a3..4b7d4aa 100644 --- a/public/js/authModals.js +++ b/public/js/authModals.js @@ -348,6 +348,7 @@ export async function openUserPanel() { const f = this.files[0]; if (!f) return; // preview immediately + // #nosec img.src = URL.createObjectURL(f); const blobUrl = URL.createObjectURL(f); // use setAttribute + encodeURI to avoid “DOM text reinterpreted as HTML” alerts