Skip to content

unescaped HTML in GUI #5258

@simonLeary42

Description

@simonLeary42

What version of the Modrinth App are you using?

Modrinth App 0.10.27 windows 10.0.26200

What operating systems are you seeing the problem on?

Windows

Describe the bug

I see this in my server log:

<body>
    <div id='content'>
        <div id='message'>
            <h2>The request is blocked.</h2>
        </div>
        <div id='errorref'>
            <span>blah blah blah</span>
        </div>
    </div>
</body>
</html>

and I see this in my GUI:

Image

Should there be some escaping to prevent XSS here?

Steps to reproduce

No response

Expected behavior

No response

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    appRelates to Modrinth App

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions