Fixed XSS in 'Text Encoding Brute Force. Closes #539

This commit is contained in:
n1474335 2019-04-14 22:00:17 +01:00
parent 38ff7ec89f
commit 01f0625d6a
1 changed files with 1 additions and 1 deletions

View File

@ -79,7 +79,7 @@ class TextEncodingBruteForce extends Operation {
let table = "<table class='table table-hover table-sm table-bordered table-nonfluid'><tr><th>Encoding</th><th>Value</th></tr>";
for (const enc in encodings) {
const value = Utils.printable(encodings[enc], true);
const value = Utils.escapeHtml(Utils.printable(encodings[enc], true));
table += `<tr><td>${enc}</td><td>${value}</td></tr>`;
}