security: harden proxy.php with config whitelist, fix XSS via EPG innerHTML

2026-03-14 02:26:36 +01:00
parent 17db9f56f7
commit 30d8a24927
4 changed files with 67 additions and 24 deletions
@@ -1,4 +1,11 @@

+// Echapper les donnees issues de l'EPG pour eviter les injections HTML
+function esc(str) {
+  const d = document.createElement('div');
+  d.textContent = str || '';
+  return d.innerHTML;
+}
+
 let channels = [];
 let programs = {};
 let m3uStreams = {}; // slug normalisé → url stream