luci-mod-system: sshkeys.js: prevent XSS through pubkey comments

[project/luci.git] / modules / luci-mod-system / htdocs / luci-static / resources / view / system / sshkeys.js

diff --git a/modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js b/modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js
index 9269a6939596babaebe571e121778864329a596c..bbb6d050d28a87666ef8fb40f790f5e7b8fa66e8 100644 (file)
--- a/modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js
+++ b/modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js
@@ -109,7 +109,7 @@ function renderKeyItem(pubkey) {
                click: removeKey,
                'data-key': pubkey.src
        }, [
-               E('strong', pubkey.comment || _('Unnamed key')), E('br'),
+               E('strong', [ pubkey.comment || _('Unnamed key') ]), E('br'),
                E('small', [
                        '%s, %s'.format(pubkey.type, pubkey.curve || _('%d Bit').format(pubkey.bits)),
                        pubkey.options ? E([], [