Release 2.53 (#5878)

2026-04-10 18:09:27 +02:00
parent fe4185ae45
commit 999d820d4c
79 changed files with 1046 additions and 430 deletions
--- a/assets/js/forms/KimaiTeamForm.js
+++ b/assets/js/forms/KimaiTeamForm.js
@@ -83,7 +83,7 @@ export default class KimaiTeamForm extends KimaiFormPlugin {
        prototype.dataset['widgetCounter'] = (++counter).toString();

        const temp = document.createElement('div');
-        temp.innerHTML = newWidget;
+        temp.innerHTML = ESCAPER.sanitize(newWidget);
        temp.querySelector('input[type=hidden]').value = option.value;

        const newNode = temp.firstElementChild;