add escape
This commit is contained in:
@@ -1,7 +1,7 @@
|
|||||||
// folderManager.js
|
// folderManager.js
|
||||||
|
|
||||||
import { loadFileList } from './fileManager.js';
|
import { loadFileList } from './fileManager.js';
|
||||||
import { showToast } from './domUtils.js';
|
import { showToast, escapeHTML } from './domUtils.js';
|
||||||
|
|
||||||
// ----------------------
|
// ----------------------
|
||||||
// Helper Functions (Data/State)
|
// Helper Functions (Data/State)
|
||||||
@@ -75,7 +75,8 @@ function renderFolderTree(tree, parentPath = "", defaultDisplay = "block") {
|
|||||||
} else {
|
} else {
|
||||||
html += `<span class="folder-indent-placeholder"></span>`;
|
html += `<span class="folder-indent-placeholder"></span>`;
|
||||||
}
|
}
|
||||||
html += `<span class="folder-option" data-folder="${fullPath}">${folder}</span>`;
|
// Use escapeHTML to safely render the folder name.
|
||||||
|
html += `<span class="folder-option" data-folder="${fullPath}">${escapeHTML(folder)}</span>`;
|
||||||
if (hasChildren) {
|
if (hasChildren) {
|
||||||
html += renderFolderTree(tree[folder], fullPath, displayState);
|
html += renderFolderTree(tree[folder], fullPath, displayState);
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user