mirror of
https://github.com/sabnzbd/sabnzbd.git
synced 2026-09-22 10:55:33 -04:00
`$.load()` interprets fetched content as HTML, which could allow malicious script execution if the script log output is untrusted. This change switches to fetching the log content via `$.get()` and inserting it as plain text using `$.text()`, ensuring that any markup is displayed safely without execution.