diff options
| author | Hendrik Leppelsack <hendrik@leppelsack.de> | 2018-03-05 21:25:45 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-03-05 21:25:45 +0100 |
| commit | b25854422754ca34133098bde4016a5662c12fbe (patch) | |
| tree | 9c82a1dd3377402652ba0dab70aa15069d0e9547 | |
| parent | 73163d22c454eeb9123aaf0d3cf57d65ff1c26ba (diff) | |
| parent | 7bffc33dbe2a2503cda7eebe73792c2f19d6bda7 (diff) | |
Merge pull request #512 from nextcloud/escape-typeahead
Display needs to be escaped
| -rw-r--r-- | js/components/addressBook/addressBook_controller.js | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/js/components/addressBook/addressBook_controller.js b/js/components/addressBook/addressBook_controller.js index 8c811b2a..6b8a0f0c 100644 --- a/js/components/addressBook/addressBook_controller.js +++ b/js/components/addressBook/addressBook_controller.js @@ -130,7 +130,7 @@ angular.module('contactsApp') // Combine users and groups users = users.map(function(item) { return { - display: item.value.shareWith, + display: _.escape(item.value.shareWith), type: OC.Share.SHARE_TYPE_USER, identifier: item.value.shareWith }; @@ -138,7 +138,7 @@ angular.module('contactsApp') groups = groups.map(function(item) { return { - display: item.value.shareWith + ' (group)', + display: _.escape(item.value.shareWith) + ' (group)', type: OC.Share.SHARE_TYPE_GROUP, identifier: item.value.shareWith }; |