From 0833e8531d0445dd461956b805e69a36d183f021 Mon Sep 17 00:00:00 2001
From: anuraghazra <hazru.anurag@gmail.com>
Date: Wed, 29 Jul 2020 19:02:06 +0530
Subject: [PATCH] fix: xss vulnerability on renderError

---
 src/utils.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/utils.js b/src/utils.js
index fe101c8..44d418b 100644
--- a/src/utils.js
+++ b/src/utils.js
@@ -13,7 +13,7 @@ const renderError = (message, secondaryMessage = "") => {
     <rect x="0.5" y="0.5" width="494" height="99%" rx="4.5" fill="#FFFEFE" stroke="#E4E2E2"/>
     <text x="25" y="45" class="text">Something went wrong! file an issue at https://git.io/JJmN9</text>
     <text data-testid="message" x="25" y="55" class="text small">
-      <tspan x="25" dy="18">${message}</tspan>
+      <tspan x="25" dy="18">${encodeHTML(message)}</tspan>
       <tspan x="25" dy="18"  class="gray">${secondaryMessage}</tspan>
     </text>
     </svg>