From 3dbfc1ba26ec874bfb9f4061b6e390f9c208b6ff Mon Sep 17 00:00:00 2001
From: Niraj Khatiwada <42860825+nerrorsec@users.noreply.github.com>
Date: Mon, 2 Sep 2024 19:21:05 +1000
Subject: [PATCH] Escape HTML

---
 summary_html/cve_summary.html | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/summary_html/cve_summary.html b/summary_html/cve_summary.html
index 7903ede9b37..3c72bf0fc73 100644
--- a/summary_html/cve_summary.html
+++ b/summary_html/cve_summary.html
@@ -140,7 +140,14 @@ <h2>CVE Search</h2>
                 "aoColumns": [
                     { "sWidth": "5%" },
                     { "sWidth": "10%" },
-                    { "sWidth": "55%" },
+                    {
+                      "sWidth": "55%",
+                      "data": 2,
+                      "render": function(data, type, row) {
+                        // Escape and return the description
+                        return $('<div/>').text(data).html();
+                      }
+                },
                     { "sWidth": "20%" },
                     { "sWidth": "10%" },
                 ],
@@ -190,4 +197,4 @@ <h2>CVE Search</h2>
     </script>
 </body>
 
-</html>
\ No newline at end of file
+</html>