syz-cluster/dashboard: html escape modal content

a-nogikh · a-nogikh · commit 028e3578dbbd · 2025-08-14T11:29:36.000Z
Otherwise we sometimes display broken data.
diff --git a/syz-cluster/dashboard/templates/series.html b/syz-cluster/dashboard/templates/series.html
@@ -27,7 +27,7 @@ <h5 class="modal-title" id="contentModalLabel">Content</h5>&nbsp;
               body.html("")
               body.load(url, function(response, status, xhr){
                   if (status == "success") {
-                      body.html("<pre>" + response + "</pre>")
+                      body.html($('<pre></pre>').text(response))
                   }
                   $('#contentModal').modal('show');
               });

Original file line number	Diff line number	Diff line change
`@@ -27,7 +27,7 @@ <h5 class="modal-title" id="contentModalLabel">Content</h5> `
`27`	`27`	`body.html("")`
`28`	`28`	`body.load(url, function(response, status, xhr){`
`29`	`29`	`if (status == "success") {`
`30`		`- body.html("<pre>" + response + "</pre>")`
	`30`	`+ body.html($('<pre></pre>').text(response))`
`31`	`31`	`}`
`32`	`32`	`$('#contentModal').modal('show');`
`33`	`33`	`});`