From a8f6e5c5f71a0f02ce7a3346c86a84b65e872dd1 Mon Sep 17 00:00:00 2001
From: Wolfsblvt <wolfsblvt@gmail.com>
Date: Tue, 30 Jul 2024 17:37:34 +0200
Subject: [PATCH] purify popup warning string

---
 public/scripts/tags.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/scripts/tags.js b/public/scripts/tags.js
index 4b8115f91..43b52f74e 100644
--- a/public/scripts/tags.js
+++ b/public/scripts/tags.js
@@ -1525,7 +1525,7 @@ async function onTagRestoreFileSelect(e) {
     if (warnings.length) {
         toastr.warning('Tags restored with warnings. Check console or click on this message for details.', 'Tag Restore', {
             timeOut: toastr.options.timeOut * 2, // Display double the time
-            onclick: () => Popup.show.text('Tag Restore Warnings', `<samp class="justifyLeft">${warnings.join('<br />')}<samp>`, { allowVerticalScrolling: true }),
+            onclick: () => Popup.show.text('Tag Restore Warnings', `<samp class="justifyLeft">${DOMPurify.sanitize(warnings.join('\n'))}<samp>`, { allowVerticalScrolling: true }),
         });
         console.warn(`TAG RESTORE REPORT\n====================\n${warnings.join('\n')}`);
     } else {