From 538467dc99e580d253bf4ab26351f8b8a5a6801a Mon Sep 17 00:00:00 2001
From: Simon Vieille <simon@deblan.fr>
Date: Sun, 21 Aug 2022 16:12:52 +0200
Subject: [PATCH] (cq) replace v-html with v-text to prevent xss

---
 src/AdminCategoriesCustom.vue  | 6 +++---
 src/SideMenuApp.vue            | 4 ++--
 src/SideMenuBig.vue            | 2 +-
 src/SideMenuBigApp.vue         | 2 +-
 src/SideMenuWithCategories.vue | 2 +-
 5 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/src/AdminCategoriesCustom.vue b/src/AdminCategoriesCustom.vue
index 909580d..ca5272a 100644
--- a/src/AdminCategoriesCustom.vue
+++ b/src/AdminCategoriesCustom.vue
@@ -18,7 +18,7 @@ along with this program. If not, see <http://www.gnu.org/licenses/>.
     <div>
         <ul class="side-menu-setting-list">
             <li v-for="item in values" class="side-menu-setting-list-item" v-on:click="showEditForm(item)">
-                <span v-html="item.en"></span>
+                <span v-text="item.en"></span>
             </li>
         </ul>
 
@@ -29,7 +29,7 @@ along with this program. If not, see <http://www.gnu.org/licenses/>.
 		<Modal v-if="addForm" @close="hideAddForm">
 			<div class="modal__content">
                 <div v-for="lang in langs">
-                    <span class="lang" v-html="lang"></span>
+                    <span class="lang" v-text="lang"></span>
                     <input type="text" v-model="newValue[lang]" required>
                 </div>
 
@@ -42,7 +42,7 @@ along with this program. If not, see <http://www.gnu.org/licenses/>.
 		<Modal v-if="editForm" @close="hideEditForm">
 			<div class="modal__content">
                 <div v-for="lang in langs">
-                    <span class="lang" v-html="lang"></span>
+                    <span class="lang" v-text="lang"></span>
                     <input type="text" v-model="editValue[lang]" required>
                 </div>
 
diff --git a/src/SideMenuApp.vue b/src/SideMenuApp.vue
index 21fe5eb..a5474c7 100644
--- a/src/SideMenuApp.vue
+++ b/src/SideMenuApp.vue
@@ -17,8 +17,8 @@ along with this program. If not, see <http://www.gnu.org/licenses/>.
 <template>
     <li v-bind:class="classes">
         <a v-bind:href="href" :target="target" v-bind:title="label">
-            <span class="side-menu-app-icon" v-html="icon"></span>
-            <span class="side-menu-app-text" v-html="label"></span>
+            <span class="side-menu-app-icon" v-text="icon"></span>
+            <span class="side-menu-app-text" v-text="label"></span>
         </a>
     </li>
 </template>
diff --git a/src/SideMenuBig.vue b/src/SideMenuBig.vue
index 4f01000..d1f0b1f 100644
--- a/src/SideMenuBig.vue
+++ b/src/SideMenuBig.vue
@@ -34,7 +34,7 @@ along with this program. If not, see <http://www.gnu.org/licenses/>.
                 <Loader v-if="!items.length" />
 
                 <div class="side-menu-category" v-for="category in items">
-                    <h2 class="side-menu-category-title" v-if="category.name != ''" v-html="category.name"></h2>
+                    <h2 class="side-menu-category-title" v-if="category.name != ''" v-text="category.name"></h2>
 
                     <ul class="side-menu-apps-list">
                         <SideMenuBigApp
diff --git a/src/SideMenuBigApp.vue b/src/SideMenuBigApp.vue
index 86a2ba4..bab78e6 100644
--- a/src/SideMenuBigApp.vue
+++ b/src/SideMenuBigApp.vue
@@ -18,7 +18,7 @@ along with this program. If not, see <http://www.gnu.org/licenses/>.
     <li v-bind:class="classes">
         <a v-bind:href="href" :target="target" v-bind:title="label">
             <img class="side-menu-app-icon" v-bind:src="icon" v-bind:alt="label" />
-            <span class="side-menu-app-text" v-html="label"></span>
+            <span class="side-menu-app-text" v-text="label"></span>
         </a>
     </li>
 </template>
diff --git a/src/SideMenuWithCategories.vue b/src/SideMenuWithCategories.vue
index 48d6def..e0a3c41 100644
--- a/src/SideMenuWithCategories.vue
+++ b/src/SideMenuWithCategories.vue
@@ -32,7 +32,7 @@ along with this program. If not, see <http://www.gnu.org/licenses/>.
                 <Loader v-if="!items.length" />
 
                 <div class="side-menu-category" v-for="category in items">
-                    <h2 class="side-menu-category-title" v-if="category.name != ''" v-html="category.name"></h2>
+                    <h2 class="side-menu-category-title" v-if="category.name != ''" v-text="category.name"></h2>
 
                     <ul class="side-menu-apps-list">
                         <SideMenuBigApp