fix html injection from file name

This commit is contained in:
xBZZZZ 2023-01-21 20:13:01 +02:00
parent 28a1ac1612
commit 1e08f181a5
1 changed files with 1 additions and 1 deletions

View File

@ -30,7 +30,7 @@ Array.prototype.forEach.call( inputs, function( input )
}
if( fileName )
label.querySelector( 'span' ).innerHTML = fileName;
label.querySelector( 'span' ).innerText = fileName;
else
label.innerHTML = labelVal;
});