Fix: Unsafe Website Content Updates Could Allow Malicious Code Injection in src/static/js/utils.js

[kira-offgrid]

Context and Purpose:

This PR automatically remediates a security vulnerability:

• Description: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities
• Rule ID: javascript.browser.security.insecure-document-method.insecure-document-method
• Severity: LOW
• File: src/static/js/utils.js
• Lines Affected: 31 - 31

This change is necessary to protect the application from potential security risks associated with this vulnerability.

Solution Implemented:

The automated remediation process has applied the necessary changes to the affected code in src/static/js/utils.js to resolve the identified issue.

Please review the changes to ensure they are correct and integrate as expected.

[cyclotruc]

@kira-offgrid Hi, thanks noticing this, unfortunatlely I get this error when trying the web ui:

[ix-56h]

I don't think there's a problem here, as long as you don't have a POC, I don't see any way to exploit that.

In fact, we should use a safe way to inject in the dom, but here it's not necessary.

[cyclotruc]

@kira-offgrid I'm going to be closing this for now, if you think we are missing something don't hesitate to ping us here, thanks a lot!