From 301a3e2e039c4f3a9154a3a4e2f5ecea2e43c0e7 Mon Sep 17 00:00:00 2001 From: Sora <8521327+SoraKasvgano@users.noreply.github.com> Date: Tue, 20 Jan 2026 10:25:46 +0800 Subject: [PATCH] Update handle_shares.go --- server/public/handle_shares.go | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/server/public/handle_shares.go b/server/public/handle_shares.go index 7e24e3bae..9df89eba9 100644 --- a/server/public/handle_shares.go +++ b/server/public/handle_shares.go @@ -183,9 +183,11 @@ func (pub *Router) handleAPlayer(w http.ResponseWriter, r *http.Request) { data := map[string]interface{}{ "ShareDescription": description, - "ShareInfo": template.JS(shareInfoJSON), - "APlayerScript": template.JS(scriptContent), - "BaseURL": baseURL, + // #nosec G203 -- shareInfoJSON is generated by json.Marshal from server data, not user input + "ShareInfo": template.JS(shareInfoJSON), + // #nosec G203 -- scriptContent is from embedded resource file, not user input + "APlayerScript": template.JS(scriptContent), + "BaseURL": baseURL, } // Render template