Use innerText instead of innerHTML

2020-03-13 19:09:22 +00:00
parent 0de9f9486a
commit ebfcbbff9c
1 changed files with 2 additions and 1 deletions
--- a/synapse/res/templates/saml_error.html
+++ b/synapse/res/templates/saml_error.html
@@ -37,7 +37,8 @@
        // to print one.
        let errorDesc = new URLSearchParams(searchStr).get("error_description")
        if (errorDesc) {
-            document.getElementById("errormsg").innerHTML = ` ("${errorDesc}")`;
+
+            document.getElementById("errormsg").innerText = ` ("${errorDesc}")`;
        }
    </script>
 </body>