fix code scanning security warning #1 and #2

ULB-Darmstadt · Jan 10, 2024 · e824025 · e824025
1 parent 46aa437
commit e824025
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/src/theme.ts b/src/theme.ts
@@ -33,6 +33,7 @@ export abstract class Theme {
         }
         viewer.appendChild(labelElem)
         let name = value.value
+        let lang: HTMLElement | null = null
         if (value instanceof NamedNode) {
             const quads = template.config.shapesGraph.getQuads(name, null, null, SHAPES_GRAPH)
             if (quads.length) {
@@ -43,7 +44,9 @@ export abstract class Theme {
             }
         } else if (value instanceof Literal) {
             if (value.language) {
-                name += '<span class="lang">@' + value.language + '</span>'
+                lang = document.createElement('span')
+                lang.classList.add('lang')
+                lang.innerText = `@${value.language}`
             } else if (value.datatype.value === `${PREFIX_XSD}date`) {
                 name = new Date(Date.parse(value.value)).toDateString()
             } else if (value.datatype.value === `${PREFIX_XSD}dateTime`) {
@@ -58,7 +61,10 @@ export abstract class Theme {
             valueElem = document.createElement('div')
         }
         valueElem.classList.add('d-flex')
-        valueElem.innerHTML = name
+        valueElem.innerText = name
+        if (lang) {
+            valueElem.appendChild(lang)
+        }
         viewer.appendChild(valueElem)
         return viewer
     }