From f79d7e51e6a03dd901e3d38a3426c3da484dbb9a Mon Sep 17 00:00:00 2001
From: Dev Prashant <dev.prashant1901@gmail.com>
Date: Thu, 30 Jul 2026 00:20:56 +0530
Subject: [PATCH] Fix DOM XSS in advanced-robots-txt-generator renderSitemaps

---
 data/themes.json                         | 12 ++++++------
 tools/advanced-robots-txt-generator.html |  2 +-
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/data/themes.json b/data/themes.json
index e013c1d..dfd7149 100644
--- a/data/themes.json
+++ b/data/themes.json
@@ -6,6 +6,12 @@
       "description": "Clean single-column layout. ATS-compliant, zero JavaScript, A4 print-ready. System fonts only.",
       "author": "Praveen Kumar Purushothaman"
     },
+    {
+      "id": "cosmic",
+      "name": "Cosmic",
+      "description": "Two-column layout, Immersive starry backdrop, Glowing elements, Monospace typography.",
+      "author": "Riya Halbhavi"
+    },
     {
       "id": "cyber",
       "name": "Cyber",
@@ -24,12 +30,6 @@
       "description": "Two-column layout, Black, grey, and white color scheme, Minimalist and clean.",
       "author": "Riya Halbhavi"
     },
-    {
-      "id": "cosmic",
-      "name": "Cosmic",
-      "description": "Two-column layout, Immersive starry backdrop, Glowing elements, Monospace typography.",
-      "author": "Riya Halbhavi"
-    },
     {
       "id": "resume-opus-5",
       "name": "Opus 5",
diff --git a/tools/advanced-robots-txt-generator.html b/tools/advanced-robots-txt-generator.html
index 25e0942..53ffc53 100644
--- a/tools/advanced-robots-txt-generator.html
+++ b/tools/advanced-robots-txt-generator.html
@@ -440,7 +440,7 @@ <h2>Configure Directives</h2>
           .map(
             (sm, i) => `
                 <div class="sitemap-row">
-                    <input type="text" value="${sm}" placeholder="https://example.com/sitemap.xml" oninput="updateSitemap(${i}, this.value)">
+                    <input type="text" value="${esc(sm)}" placeholder="https://example.com/sitemap.xml" oninput="updateSitemap(${i}, this.value)">
                     <button class="icon-btn" onclick="removeSitemap(${i})">✕</button>
                 </div>
             `