From 1e08f181a51098d711b0f61c941f7997216b2e10 Mon Sep 17 00:00:00 2001
From: xBZZZZ <alanas.00@mail.ru>
Date: Sat, 21 Jan 2023 20:13:01 +0200
Subject: [PATCH] fix html injection from file name

---
 updog/static/js/main.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/updog/static/js/main.js b/updog/static/js/main.js
index 3df22cf..43d1307 100755
--- a/updog/static/js/main.js
+++ b/updog/static/js/main.js
@@ -30,7 +30,7 @@ Array.prototype.forEach.call( inputs, function( input )
 		}
 
 		if( fileName )
-			label.querySelector( 'span' ).innerHTML = fileName;
+			label.querySelector( 'span' ).innerText = fileName;
 		else
 			label.innerHTML = labelVal;
 	});