Merge pull request #7549 from VikalpRusia/escape-html-creating

Escaped HTML in the snapshot creation dialog box
rancher-sandbox · Sep 26, 2024 · 2b2c765 · 2b2c765
2 parents 8af4e1b + 0387a1b
commit 2b2c765
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/rancher-desktop/pages/snapshots/create.vue b/pkg/rancher-desktop/pages/snapshots/create.vue
@@ -7,6 +7,7 @@ import { mapGetters } from 'vuex';
 
 import { Snapshot, SnapshotEvent } from '@pkg/main/snapshots/types';
 import { ipcRenderer } from '@pkg/utils/ipcRenderer';
+import { escapeHtml } from '@pkg/utils/string';
 
 const defaultName = () => {
   const dateString = dayjs().format('YYYY-MM-DD_HH_mm_ss');
@@ -109,7 +110,7 @@ export default Vue.extend({
           format: {
             header:            this.t('snapshots.dialog.creating.header', { snapshot: name }),
             showProgressBar:   true,
-            message:           this.t('snapshots.dialog.creating.message', { snapshot: name }, true),
+            message:           this.t('snapshots.dialog.creating.message', { snapshot: escapeHtml(name) }, true),
             snapshotEventType: 'create',
           },
         },