Bastian-Greshake-Tzovaras/MapComplete
1
0
Fork 0
forked from MapComplete/MapComplete
Code Pull requests Activity

Security: use safe 'setAttribute'

Browse source
This commit is contained in:
Pieter Vander Vennet 2023-09-21 02:35:29 +02:00
parent 8d1ae657fc
commit ac236199fc
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/UI/Base/Link.ts
View file

@ -53,17 +53,17 @@ export default class Link extends BaseUIElement {
}
const el = document.createElement("a")
if (typeof this._href === "string") {
el.href = this._href
el.setAttribute("href", this._href)
} else {
this._href.addCallbackAndRun((href) => {
el.href = href
el.setAttribute("href", href)
})
}
if (this._newTab) {
el.target = "_blank"
}
if (this._download) {
el.download = this._download
el.setAttribute("download", this._download)
}
el.appendChild(embeddedShow)
return el