fix security issue #1556 & #1555

OWASP-BLT · Nov 2, 2023 · 112ad81 · 112ad81
1 parent 510238a
commit 112ad81
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/website/templates/issue.html b/website/templates/issue.html
@@ -414,7 +414,7 @@ <h3>Comments:</h3>
 <script type="text/javascript">
     function sanitizeURL(url) {
         var a = document.createElement('a');
-        a.href = url;
+        a.href = encodeURI(url);
         return a.href;
     }