Merge pull request #9 from paulyi/master

Fix XSS vulnerability
SLMNBJ · Jul 15, 2019 · 927d81e · 927d81e
2 parents fb2b938 + 0cf56ee
commit 927d81e
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/selectize-plugin-a11y.js b/selectize-plugin-a11y.js
@@ -25,8 +25,9 @@ Selectize.define("selectize-plugin-a11y", function (options) {
   self.accessibility.liveRegion = {
     $region: "",
     speak: function (msg) {
-      var $msg = $("<div>" + escape(msg) + "</div>");
-      this.$region.html($msg);
+      var $container = $("<div></div>");
+      $container.text(msg);
+      this.$region.html($container);
     },
     domListener: function () {
       var observer = new MutationObserver(function (mutations) {