mirror of
https://github.com/discourse/discourse.git
synced 2025-09-06 10:50:21 +08:00
Combobox view: escape name string.
This commit is contained in:
parent
50ce93a850
commit
8163fcade7
1 changed files with 1 additions and 1 deletions
|
@ -42,7 +42,7 @@ Discourse.ComboboxView = Discourse.View.extend({
|
||||||
if (val) { val = val.toString(); }
|
if (val) { val = val.toString(); }
|
||||||
|
|
||||||
var selectedText = (val === selected) ? "selected" : "";
|
var selectedText = (val === selected) ? "selected" : "";
|
||||||
buffer.push("<option " + selectedText + " value=\"" + val + "\" " + self.buildData(o) + ">" + Em.get(o, nameProperty) + "</option>");
|
buffer.push("<option " + selectedText + " value=\"" + val + "\" " + self.buildData(o) + ">" + Handlebars.Utils.escapeExpression(Em.get(o, nameProperty)) + "</option>");
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue