Describe the bug
Name/Label of roles are not escaped and are displayed in the role hierarchy graphic as is. leading to a potential attack like a role with a name that contains malicious html.
To Reproduce
Update a role in the role hierarchy with label like this for example:
Fake Role Level 7<a href="https://www.google.com">google</a>
the graphic of the role hierarchy for this role will contain a link instead of plain text
global picture:
detail:
Describe the bug
Name/Label of roles are not escaped and are displayed in the role hierarchy graphic as is. leading to a potential attack like a role with a name that contains malicious html.
To Reproduce
Update a role in the role hierarchy with label like this for example:
Fake Role Level 7<a href="https://www.google.com">google</a>the graphic of the role hierarchy for this role will contain a link instead of plain text
global picture:
detail:
