🔒 Small security fix to not allow dangerous html code

2026-06-20 15:36:18 +00:00 · 2026-02-25 11:17:51 +01:00
parent 32cf466fb4
commit 242f86bb90
2 changed files with 2 additions and 6 deletions
@@ -24,9 +24,7 @@ export const AvatarInfoWidgetNameView: FC<AvatarInfoWidgetNameViewProps> = props

    return (
        <ContextMenuView category={ nameInfo.category } classNames={ getClassNames } fades={ (nameInfo.id !== GetSessionDataManager().userId) } objectId={ nameInfo.roomIndex } userType={ nameInfo.userType } onClose={ onClose }>
-            <div className="text-shadow">
-                { nameInfo.name }
-            </div>
+            <div className="text-shadow" dangerouslySetInnerHTML={ { __html: `${ nameInfo.name }` } }></div>
        </ContextMenuView>
    );
 };