From 37e3e33c7d16ec28998bd652359266f3cb06b9b3 Mon Sep 17 00:00:00 2001
From: sylenien <nikita@openreplay.com>
Date: Thu, 1 Sep 2022 10:22:51 +0200
Subject: [PATCH] fix(player): sanitize html nodes

---
 .../player/MessageDistributor/StatedScreen/Screen/Marker.js   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/frontend/app/player/MessageDistributor/StatedScreen/Screen/Marker.js b/frontend/app/player/MessageDistributor/StatedScreen/Screen/Marker.js
index 4ff401093..ff1476ac3 100644
--- a/frontend/app/player/MessageDistributor/StatedScreen/Screen/Marker.js
+++ b/frontend/app/player/MessageDistributor/StatedScreen/Screen/Marker.js
@@ -104,11 +104,11 @@ export default class Marker {
       let k = attrs[i];
       const attribute = k.name;
       if (attribute === 'class') {
-        str += `<span style="color:#F29766">${'.' + safeString(k.value.split(' ').join('.'))}</span>`;
+        str += `<span style="color:#F29766">${'.' + safeString(k.value).split(' ').join('.')}</span>`;
       }
 
       if (attribute === 'id') {
-        str += `<span style="color:#F29766">${'#' + safeString(k.value.split(' ').join('#'))}</span>`;
+        str += `<span style="color:#F29766">${'#' + safeString(k.value).split(' ').join('#')}</span>`;
       }
     }