Fixed XSS in 'Text Encoding Brute Force. Closes #539

n1474335 · n1474335 · commit 01f0625d6a17 · 2019-04-14T22:00:17.000+01:00
diff --git a/src/core/operations/TextEncodingBruteForce.mjs b/src/core/operations/TextEncodingBruteForce.mjs
@@ -79,7 +79,7 @@ class TextEncodingBruteForce extends Operation {
         let table = "<table class='table table-hover table-sm table-bordered table-nonfluid'><tr><th>Encoding</th><th>Value</th></tr>";
 
         for (const enc in encodings) {
-            const value = Utils.printable(encodings[enc], true);
+            const value = Utils.escapeHtml(Utils.printable(encodings[enc], true));
             table += `<tr><td>${enc}</td><td>${value}</td></tr>`;
         }
 

Original file line number	Diff line number	Diff line change
`@@ -79,7 +79,7 @@ class TextEncodingBruteForce extends Operation {`
`79`	`79`	`let table = "<table class='table table-hover table-sm table-bordered table-nonfluid'><tr><th>Encoding</th><th>Value</th></tr>";`
`80`	`80`
`81`	`81`	`for (const enc in encodings) {`
`82`		`- const value = Utils.printable(encodings[enc], true);`
	`82`	`+ const value = Utils.escapeHtml(Utils.printable(encodings[enc], true));`
`83`	`83`	table += `<tr><td>${enc}</td><td>${value}</td></tr>`;
`84`	`84`	`}`
`85`	`85`