Use innerText instead of innerHTML

matrix-org · Mar 13, 2020 · ebfcbbf · ebfcbbf
1 parent 0de9f94
commit ebfcbbf
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/synapse/res/templates/saml_error.html b/synapse/res/templates/saml_error.html
@@ -37,7 +37,8 @@
         // to print one.
         let errorDesc = new URLSearchParams(searchStr).get("error_description")
         if (errorDesc) {
-            document.getElementById("errormsg").innerHTML = ` ("${errorDesc}")`;
+
+            document.getElementById("errormsg").innerText = ` ("${errorDesc}")`;
         }
     </script>
 </body>