From b35a922e40a77413410d913ff8d2cb274231c60b Mon Sep 17 00:00:00 2001 From: root Date: Wed, 21 Jan 2026 16:51:48 +0000 Subject: [PATCH] fix: insecure-document-method-226 --- docs/en/docs/js/termynal.js | 22 +++++++++++++++++++--- 1 file changed, 19 insertions(+), 3 deletions(-) diff --git a/docs/en/docs/js/termynal.js b/docs/en/docs/js/termynal.js index 82d04e2d0..47dc0c54b 100644 --- a/docs/en/docs/js/termynal.js +++ b/docs/en/docs/js/termynal.js @@ -222,10 +222,26 @@ class Termynal { */ lineDataToElements(lineData) { return lineData.map(line => { - let div = document.createElement('div'); - div.innerHTML = `${line.value || ''}`; + let span = document.createElement('span'); + + // Safely set text content instead of using innerHTML + span.textContent = line.value || ''; + + // Safely set attributes + for (let prop in line) { + // Custom add class + if (prop === 'class') { + span.className = line[prop]; + continue; + } + if (prop === 'type') { + span.setAttribute(this.pfx, line[prop]); + } else if (prop !== 'value') { + span.setAttribute(`${this.pfx}-${prop}`, line[prop]); + } + } - return div.firstElementChild; + return span; }); }