From 57d566a655d72e5eee54dabea13147222af253e6 Mon Sep 17 00:00:00 2001
From: "Prashanth, Veeraboena" <veprashanth@deloitte.com>
Date: Fri, 16 Jan 2026 19:45:14 +0530
Subject: [PATCH] fix: cross-site sast issue-websocket

---
 WebContent/websocket/websocket.js | 22 ++++++++++++++++++----
 1 file changed, 18 insertions(+), 4 deletions(-)

diff --git a/WebContent/websocket/websocket.js b/WebContent/websocket/websocket.js
index 6227805fb..38a85a3a7 100644
--- a/WebContent/websocket/websocket.js
+++ b/WebContent/websocket/websocket.js
@@ -7,14 +7,28 @@ function onMessage(event) {
     displayPixelResponse(pixelResponse);
 }
 
+// function displayPixelResponse(pixelResponse) {
+//     var content = document.getElementById("content");
+//     var div = document.createElement("div");
+    
+//     var html = "<h3>New Pixel</h3>";
+//     html += "<p>" +  JSON.stringify(pixelResponse) + "</p>";
+
+//     div.innerHTML= html;
+//     content.appendChild(div);
+// }
 function displayPixelResponse(pixelResponse) {
     var content = document.getElementById("content");
     var div = document.createElement("div");
-    
-    var html = "<h3>New Pixel</h3>";
-    html += "<p>" +  JSON.stringify(pixelResponse) + "</p>";
 
-    div.innerHTML= html;
+    var title = document.createElement("h3");
+    title.textContent = "New Pixel";
+    div.appendChild(title);
+
+    var para = document.createElement("p");
+    para.textContent = JSON.stringify(pixelResponse); // Safe: textContent escapes HTML
+    div.appendChild(para);
+
     content.appendChild(div);
 }