fix: prevent XSS in AnsiDisplay component (#397)

Co-authored-by: UncleGedd <42304551+UncleGedd@users.noreply.github.com>
defenseunicorns · Nov 1, 2024 · 60d52ee · 60d52ee
1 parent 14092df
commit 60d52ee
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/ui/src/lib/components/AnsiDisplay/component.svelte b/ui/src/lib/components/AnsiDisplay/component.svelte
@@ -9,6 +9,7 @@
   const convert = new Convert({
     newline: true,
     stream: true,
+    escapeXML: true,
   })
   let termElement: HTMLElement | null
   let scrollAnchor: Element | null | undefined