mirror of
https://github.com/nextcloud/server.git
synced 2026-06-09 08:44:07 -04:00
escape display name and email
This commit is contained in:
parent
1083085e6e
commit
78c0cc6089
1 changed files with 1 additions and 1 deletions
|
|
@ -348,7 +348,7 @@ OC.Share={
|
|||
})
|
||||
.data("ui-autocomplete")._renderItem = function( ul, item ) {
|
||||
return $( "<li>" )
|
||||
.append( "<a>" + item.displayname + "<br>" + item.email + "</a>" )
|
||||
.append( "<a>" + escapeHTML(item.displayname) + "<br>" + escapeHTML(item.email) + "</a>" )
|
||||
.appendTo( ul );
|
||||
};
|
||||
}
|
||||
|
|
|
|||
Loading…
Reference in a new issue