mirror of
https://github.com/redmine/redmine.git
synced 2026-03-18 02:20:59 +01:00
Sanitize name in user auto complete (#43691).
git-svn-id: https://svn.redmine.org/redmine/trunk@24342 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
@@ -1348,7 +1348,7 @@ function inlineAutoComplete(element) {
|
||||
}
|
||||
},
|
||||
menuItemTemplate: function (user) {
|
||||
return user.original.name;
|
||||
return sanitizeHTML(user.original.name);
|
||||
},
|
||||
selectTemplate: function (user) {
|
||||
return '@' + user.original.login;
|
||||
|
||||
Reference in New Issue
Block a user