Prevent Cross-site scripting

2021-01-19 13:43:27 +01:00
parent d56396acb7
commit 5d2474466d
2 changed files with 11 additions and 1 deletions
--- a/app/assets/javascripts/sdg/related_list_selector.js
+++ b/app/assets/javascripts/sdg/related_list_selector.js
@@ -12,7 +12,7 @@

        amsify_suggestags.getTag = function(value) {
          if (this.getItem(value) !== undefined) {
-            return this.getItem(value).display_text;
+            return $("<div>" + this.getItem(value).display_text + "</div>").text();
          } else {
            return value;
          }