CHANGELOG.md

@@ -3,6 +3,8 @@
 
 - Fix: Refresh data tables after deleting any number of entries (corbz/PYRSS-Website#38)
 -
+-               TODO: fix areas marked `// FIX: potential xss attack`
+-
 
 **v0.3.3**
 

apps/static/js/home/filters.js

@@ -257,7 +257,7 @@ $("#deleteEditFilter").on("click", async function() {
 
     await confirmDeleteModal(
         "Confirm Deletion",
-        `Do you wish to permanently delete <b>${filter.name}</b>?`,
+        `Do you wish to permanently delete <b>${filter.name}</b>?`, // FIX: potential xss attack
         async () => {
             await deleteFilter(filterId);
             await loadFilters(getCurrentlyActiveServer().guild_id);
@@ -265,7 +265,7 @@ $("#deleteEditFilter").on("click", async function() {
             showToast(
                 "danger",
                 "Deleted a Filter",
-                filter.name,
+                filter.name,  // FIX: potential xss attack
                 12000
             );
         },

apps/static/js/home/subscriptions.js

@@ -402,7 +402,7 @@ $("#deleteEditSub").on("click", async function() {
 
     await confirmDeleteModal(
         "Confirm Deletion",
-        `Do you wish to permanently delete <b>${sub.name}</b>?`,
+        `Do you wish to permanently delete <b>${sub.name}</b>?`,  // FIX: potential xss attack
         async () => {
             await deleteSubscription(subId);
             await loadSubscriptions(getCurrentlyActiveServer().guild_id);
@@ -410,7 +410,7 @@ $("#deleteEditSub").on("click", async function() {
             showToast(
                 "danger",
                 "Deleted a Subscription",
-                sub.name,
+                sub.name,  // FIX: potential xss attack
                 12000
             );
         },