midgard/MapComplete
1
0
Fork 0
forked from MapComplete/MapComplete
Code Pull requests Activity

Security: use safe 'setAttribute'

Browse source
This commit is contained in:
Pieter Vander Vennet 2023-09-21 02:35:29 +02:00
parent 8d1ae657fc
commit ac236199fc
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/UI/Base/Link.ts
View file

@ -53,17 +53,17 @@ export default class Link extends BaseUIElement {
} }
const el = document.createElement("a") const el = document.createElement("a")
if (typeof this._href === "string") { if (typeof this._href === "string") {
el.href = this._href el.setAttribute("href", this._href)
} else { } else {
this._href.addCallbackAndRun((href) => { this._href.addCallbackAndRun((href) => {
el.href = href el.setAttribute("href", href)
}) })
} }
if (this._newTab) { if (this._newTab) {
el.target = "_blank" el.target = "_blank"
} }
if (this._download) { if (this._download) {
el.download = this._download el.setAttribute("download", this._download)
} }
el.appendChild(embeddedShow) el.appendChild(embeddedShow)
return el return el