Merge pull request #1 from JavivuG/autofix/alert-9-c5cd00ea87

Fix code scanning alert #9: DOM text reinterpreted as HTML
JavivuG · Sep 23, 2024 · a7b9418 · a7b9418
2 parents e5a78d4 + efaa2d0
commit a7b9418
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/main/webapp/scripts/create_new_topic.js b/src/main/webapp/scripts/create_new_topic.js
@@ -27,12 +27,12 @@ function toggleModal() {
         action.addEventListener('click', function() {
             var result = parseInt(this.dataset.confirm);
             if (result === 1) {
-                var title = document.getElementById('title').value;
-                var message = document.getElementById('message').value;
+                var title = encodeURIComponent(document.getElementById('title').value);
+                var message = encodeURIComponent(document.getElementById('message').value);
                 let queryString = window.location.search; 
                 let urlParams = new URLSearchParams(queryString);
                 var idForo = urlParams.get('idForo');
-                window.location.href = '/CreateTopic?idForo=' + idForo + '&title='+title+'&message='+message;
+                window.location.href = '/CreateTopic?idForo=' + idForo + '&title=' + title + '&message=' + message;
             } else {
                 wrapper.classList.remove('active');
                 setTimeout(function() {