Escape interpolated values. Updates #779

2017-02-14 07:28:04 +01:00 · 2017-02-14 07:28:04 +01:00 · e63607227d
commit e63607227d
parent e8cf903dc0
1 changed files with 1 additions and 1 deletions
--- a/src/converse-muc.js
+++ b/src/converse-muc.js
@ -2052,7 +2052,7 @@
                            ));
                        },
                        templates: {
-                            suggestion: _.template('<p data-jid="{{jid}}">{{value}}</p>')
+                            suggestion: _.template('<p data-jid="{{{jid}}}">{{{value}}}</p>')
                        }
                    });
                    $el.on('typeahead:selected', function (ev, suggestion, dname) {