mbraak opened this issue 2 years ago · 0 comments
Dom text is reinterpreted as HTML without escaping meta-characters.
msg.innerHTML = `${file.name}: ${this.translations["Invalid file type"]}`