From f809ae192b571944ad773e9866d3e67064ae8043 Mon Sep 17 00:00:00 2001
From: cmcooper1980 <cmcooper1980@gmail.com>
Date: Sat, 18 Apr 2026 19:12:17 -0500
Subject: [PATCH] fixed missed v-html xss warning vulnerability

---
 frontend/src/components/settings/Security.vue | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/frontend/src/components/settings/Security.vue b/frontend/src/components/settings/Security.vue
index 0ece48a..7c5ce2f 100644
--- a/frontend/src/components/settings/Security.vue
+++ b/frontend/src/components/settings/Security.vue
@@ -94,10 +94,18 @@
         <TwoFADialog ref="TwoFADialog" />
 
         <Confirm ref="confirmDisableAuth" btn-style="btn-danger" :yes-text="$t('I understand, please disable')" :no-text="$t('Leave')" @yes="disableAuth">
-            <!-- eslint-disable-next-line vue/no-v-html -->
-            <p v-html="$t('disableauth.message1')"></p>
-            <!-- eslint-disable-next-line vue/no-v-html -->
-            <p v-html="$t('disableauth.message2')"></p>
+            <i18n-t keypath="disableauth.message1" tag="p">
+                <template #disableAuth>
+                    <strong>{{ $t('disableAuth') }}</strong>
+                </template>
+            </i18n-t>
+
+            <i18n-t keypath="disableauth.message2" tag="p">
+                <template #scenarios>
+                    <strong>{{ $t('scenarios') }}</strong>
+                </template>
+            </i18n-t>
+
             <p>{{ $t("Please use this option carefully!") }}</p>
 
             <div class="mb-3">