Resolve brakeman issues with unescaped js

pinballmap · Jan 7, 2025 · a231386 · a231386
1 parent e473217
commit a231386
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app/views/locations/_locations.html.haml b/app/views/locations/_locations.html.haml
@@ -36,9 +36,9 @@
   var isSingleLocation = #{@locations.size == 1 ? true : false};
 
   if (isSingleLocation) {
-    var locationName = "#{@locations.size == 0 ? '' : @locations[0].name}";
+    var locationName = "#{@locations.size == 0 ? '' : h(@locations[0].name)}";
 
-    var regionName = "#{@region ? @region.full_name : ''}"
+    var regionName = "#{@region ? h(@region.full_name) : ''}"
 
     newTitle = locationName + " - " + regionName + " Pinball Map";