From f709c23bcc972d2e769b959800c2b75ec5abda66 Mon Sep 17 00:00:00 2001
From: Ryan <ryantl66@gmail.com>
Date: Mon, 17 Mar 2025 01:46:00 -0400
Subject: [PATCH] add escape

---
 folderManager.js | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/folderManager.js b/folderManager.js
index 27d0621..43fde17 100644
--- a/folderManager.js
+++ b/folderManager.js
@@ -1,7 +1,7 @@
 // folderManager.js
 
 import { loadFileList } from './fileManager.js';
-import { showToast } from './domUtils.js';
+import { showToast, escapeHTML } from './domUtils.js';
 
 // ----------------------
 // Helper Functions (Data/State)
@@ -75,7 +75,8 @@ function renderFolderTree(tree, parentPath = "", defaultDisplay = "block") {
     } else {
       html += `<span class="folder-indent-placeholder"></span>`;
     }
-    html += `<span class="folder-option" data-folder="${fullPath}">${folder}</span>`;
+    // Use escapeHTML to safely render the folder name.
+    html += `<span class="folder-option" data-folder="${fullPath}">${escapeHTML(folder)}</span>`;
     if (hasChildren) {
       html += renderFolderTree(tree[folder], fullPath, displayState);
     }