Merge pull request #470 from potato-pancake-png/fix/packet-display

Fix stored XSS in received packet rendering

data_embed/script.js

@@ -606,13 +606,11 @@ function loadReceivedPackets(packets) {
         packets.forEach((packet) => {
             const element = document.createElement("tr");
 
-            element.innerHTML = `
-                        <td>${packet.rxDate}</td>
-                        <td>${packet.rxTime}</td>
-                        <td>${packet.packet}</td>
-                        <td>${packet.RSSI}</td>
-                        <td>${packet.SNR}</td>
-                    `;
+            ['rxDate', 'rxTime', 'packet', 'RSSI', 'SNR'].forEach((field) => {
+                const cell = document.createElement("td");
+                cell.textContent = String(packet[field]);
+                element.appendChild(cell);
+            });
 
             container.appendChild(element);
         })
@@ -1172,4 +1170,4 @@ form.addEventListener("invalid", function (event) {
             el.scrollIntoView({ block: "center", behavior: "smooth" });
         }, 0);
     }
-}, true);
+}, true);