@@ -138,7 +142,7 @@
}
};
function joinRoom() {
- let roomName = document.getElementById('roomName').value;
+ let roomName = filterXSS(document.getElementById('roomName').value);
window.location.href = '/join/' + roomName;
}
diff --git a/public/views/newroom.html b/public/views/newroom.html
index bc3e5316..2abc1ceb 100755
--- a/public/views/newroom.html
+++ b/public/views/newroom.html
@@ -51,6 +51,10 @@
+
+
+
+
@@ -137,7 +141,7 @@
}
};
function joinRoom() {
- let roomName = document.getElementById('roomName').value;
+ let roomName = filterXSS(document.getElementById('roomName').value);
window.location.href = '/join/' + roomName;
}