From 120844862fe5eff090f71cdf7c027ab8926e5587 Mon Sep 17 00:00:00 2001
From: REJack <info@rejack.de>
Date: Mon, 30 Nov 2020 09:50:19 +0100
Subject: [PATCH] escape navItem & tabItem in IFrame.js

---
 build/js/IFrame.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/build/js/IFrame.js b/build/js/IFrame.js
index de8c4a43e..ef7418cd8 100644
--- a/build/js/IFrame.js
+++ b/build/js/IFrame.js
@@ -88,10 +88,10 @@ class IFrame {
     const navId = `tab-${uniqueName}-${Math.floor(Math.random() * 1000)}`
 
     const newNavItem = `<li class="nav-item" role="presentation"><a class="nav-link" data-toggle="row" id="${navId}" href="#${tabId}" role="tab" aria-controls="${tabId}" aria-selected="false">${title}</a></li>`
-    $(SELECTOR_TAB_NAVBAR_NAV).append(newNavItem)
+    $(SELECTOR_TAB_NAVBAR_NAV).append(escape(newNavItem))
 
     const newTabItem = `<div class="tab-pane fade" id="${tabId}" role="tabpanel" aria-labelledby="${navId}"><iframe src="${link}"></iframe></div>`
-    $(SELECTOR_TAB_CONTENT).append(newTabItem)
+    $(SELECTOR_TAB_CONTENT).append(escape(newTabItem))
 
     if (autoOpen) {
       if (this._config.loadingScreen) {