diff --git a/src/app/auth/error/page.tsx b/src/app/auth/error/page.tsx index 3e4861b..6a493a3 100644 --- a/src/app/auth/error/page.tsx +++ b/src/app/auth/error/page.tsx @@ -9,9 +9,14 @@ import { Suspense } from "react" function Search() { const searchParams = useSearchParams() const errorMessage = searchParams.get('error') + + // Sanitize error message to prevent XSS + const sanitizedError = errorMessage + ? errorMessage.replace(/[<>]/g, '') + : 'An authentication error occurred' return (
- {errorMessage} + {sanitizedError}
) }