Merge pull request #3875 from dodona-edu/fix/xss

Fix XSS in course copy
dodona-edu · Aug 9, 2022 · 194f5fa · 194f5fa
2 parents 2a09168 + 40a2c3e
commit 194f5fa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/assets/javascripts/course.js b/app/assets/javascripts/course.js
@@ -271,7 +271,7 @@ function initCourseNew() {
             $(this)
                 .closest(".panel")
                 .find(".answer")
-                .html($(this).data("answer"));
+                .text($(this).data("answer"));
             fetch(`/courses/new.js?copy_options[base_id]=${$(this).data("course_id")}`)
                 .then(req => req.text())
                 .then(resp => eval(resp));