fix(templates): potential DOM XSS

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
projectdiscovery · Dec 13, 2024 · f31e963 · f31e963
1 parent 98646e6
commit f31e963
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/internal/server/templates/index.html b/internal/server/templates/index.html
@@ -333,7 +333,9 @@
         });
 
         function toggleJSON() {
-            window.location.href = window.location.href + '.json';
+            const url = new URL(window.location.href);
+            url.pathname = url.pathname + '.json';
+            window.location.href = url.toString();
         }
     </script>
 </body>