Temporarily whitelist existing uses of innerHTML badness.

zaproxy · Oct 10, 2019 · 8bcfa3a · 8bcfa3a
1 parent ea7475c
commit 8bcfa3a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/main/zapHomeFiles/hud/display.js b/src/main/zapHomeFiles/hud/display.js
@@ -1113,6 +1113,8 @@ navigator.serviceWorker.addEventListener('message', event => {
 
 			channel.port1.addEventListener('message', event => {
 				// Open window and inject the HTML report
+				// FIXME: remove after #620
+				// eslint-disable-next-line no-unsanitized/property
 				window.open('').document.body.innerHTML = event.data.response;
 			});