mirror of
https://github.com/PR0M3TH3AN/bitvid.git
synced 2026-11-06 04:42:57 +00:00
Merge pull request #2455 from PR0M3TH3AN/ai/innerhtml-fix/subscriptions-12650247027422970359
[security] replace innerHTML usages in js/subscriptions.js — convert to safe DOM APIs
This commit is contained in:
8 files changed
+113
-16
No files matched your search
@@ -0,0 +1,16 @@
|
||||
# Context
|
||||
|
||||
- **File:** `js/subscriptions.js`
|
||||
- **Reason:** Migrating `innerHTML` assignments to safe DOM APIs as part of security hardening.
|
||||
- **Date:** 2026-02-13
|
||||
- **Commit:** (will be added)
|
||||
- **Node:** v22.22.0
|
||||
- **npm:** 11.7.0
|
||||
|
||||
## Plan
|
||||
|
||||
1. Replace `innerHTML` assignments with `textContent` where possible.
|
||||
2. Implement `renderStatusMessage` helper for simple messages.
|
||||
3. Implement `renderLoadingIndicator` helper to replace `getSidebarLoadingMarkup`.
|
||||
4. Verify changes with lint and tests.
|
||||
5. Update `check-innerhtml` baseline.
|
||||
Reference in new issue
Block a user