fix: sanitize html in strings plugin view (#1352)

fkie-cad · Feb 28, 2025 · c3f2ecc · c3f2ecc
1 parent 1fa86be
commit c3f2ecc
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/plugins/analysis/strings/view/printable_strings.html b/src/plugins/analysis/strings/view/printable_strings.html
@@ -15,6 +15,7 @@
                    data-buttons-class="primary"
                    data-show-toggle="true"
                    data-show-fullscreen="true"
+                   data-escape="true"
                    class="table table-bordered table-hover table-sm"
                    id="stringsTable">
                 <thead>
@@ -63,7 +64,7 @@
         }
 
         function formatFloat(value) {
-            return value.toFixed(1);
+            return parseFloat(value).toFixed(1);
         }
 
         function getCellStyle(value, row, index, field) {