From 616e6ea24ec2ab82f4be3b8d6e67d2b40a0af5de Mon Sep 17 00:00:00 2001
From: MickaelK <mickael@kerjean.me>
Date: Thu, 22 May 2025 01:25:02 +1000
Subject: [PATCH] fix (sanitize): input sanitisation

---
 public/assets/pages/ctrl_error.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/public/assets/pages/ctrl_error.js b/public/assets/pages/ctrl_error.js
index 39745c39..5a15162f 100644
--- a/public/assets/pages/ctrl_error.js
+++ b/public/assets/pages/ctrl_error.js
@@ -2,7 +2,7 @@ import { createElement, createRender } from "../lib/skeleton/index.js";
 import { toHref, fromHref, navigate } from "../lib/skeleton/router.js";
 import { forwardURLParams } from "../lib/path.js";
 import rxjs, { effect, applyMutation } from "../lib/rx.js";
-import { qs } from "../lib/dom.js";
+import { qs, safe } from "../lib/dom.js";
 import t from "../locales/index.js";
 
 import { AjaxError, ApplicationError } from "../lib/error.js";
@@ -38,7 +38,7 @@ export default function(render) {
                 <div class="component_container">
                     <div class="error-page">
                         <h1>${t("Oops!")}</h1>
-                        <h2>${t(msg)}</h2>
+                        <h2>${t(safe(msg))}</h2>
                         <p>
                             <button class="light" data-bind="details">${t("More details")}</button>
                             <button class="primary" data-bind="refresh">${t("Reload")}</button>