add escape

This commit is contained in:
Ryan
2025-03-17 01:46:00 -04:00
committed by GitHub
parent 344b95f31d
commit f709c23bcc

View File

@@ -1,7 +1,7 @@
// folderManager.js // folderManager.js
import { loadFileList } from './fileManager.js'; import { loadFileList } from './fileManager.js';
import { showToast } from './domUtils.js'; import { showToast, escapeHTML } from './domUtils.js';
// ---------------------- // ----------------------
// Helper Functions (Data/State) // Helper Functions (Data/State)
@@ -75,7 +75,8 @@ function renderFolderTree(tree, parentPath = "", defaultDisplay = "block") {
} else { } else {
html += `<span class="folder-indent-placeholder"></span>`; html += `<span class="folder-indent-placeholder"></span>`;
} }
html += `<span class="folder-option" data-folder="${fullPath}">${folder}</span>`; // Use escapeHTML to safely render the folder name.
html += `<span class="folder-option" data-folder="${fullPath}">${escapeHTML(folder)}</span>`;
if (hasChildren) { if (hasChildren) {
html += renderFolderTree(tree[folder], fullPath, displayState); html += renderFolderTree(tree[folder], fullPath, displayState);
} }