fix security issue #1337

Author: JisanAR03

website/templates/report.html

@@ -407,7 +407,7 @@ <h2 class="text-2xl font-semibold leading-7 text-gray-900">
             let fileDiv = $("<div>").addClass("w-full md:w-[300px] h-[180px] overflow-hidden rounded-lg").attr("onclick", `previewFile('${safeName}')`);
             let titleDiv = $("<div>").addClass("w-full h-10 flex justify-center rounded-t-lg p-2 bg-gray-500");
             let titleP = $("<p>").addClass("text-xl text-white font-bold").text(safeNameDisplay);
-            let img = $("<img>").addClass("object-cover").attr("src", src);
+            let img = $("<img>").addClass("object-cover").attr("src", escapeHtml(src));
 
             titleDiv.append(titleP);
             fileDiv.append(titleDiv).append(img);