diff --git a/web/targetApp/templates/target/list.html b/web/targetApp/templates/target/list.html
index db287e4ab..dd4cfcb66 100644
--- a/web/targetApp/templates/target/list.html
+++ b/web/targetApp/templates/target/list.html
@@ -165,11 +165,11 @@ Filters
{
"render": function(data, type, row) {
var content = '';
- content += `${data} (view whois)`;
+ content += `${htmlEncode(data)} (view whois)`;
if (row.organization) {
content += '
';
for (var org in row.organization) {
- content += `${row.organization[org]}`;
+ content += `${htmlEncode(row.organization[org])}`;
}
}
@@ -179,13 +179,19 @@ Filters
// if bounty mode is enabled show target hackerone handle, when clicked must take to hackerone program
{% if user_preferences.bug_bounty_mode %}
- content += `
${row.h1_team_handle}`;
+ content += `
${htmlEncode(row.h1_team_handle)}`;
{% endif %}
return content;
},
"targets": 2,
},
+ {
+ "render": function(data, type, row) {
+ return htmlEncode(data);
+ },
+ "targets": 3,
+ },
{
"render": function(data, type, row) {
var content = '