Merge pull request #278 from plone/petschki-htmlescaped-fc-tags

Escape HTML when showing tags in `folder_contents` popover.
plone · Feb 12, 2024 · 4a31441 · 4a31441
2 parents 3fa0d14 + 65522da
commit 4a31441
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/news/278.bugfix b/news/278.bugfix
@@ -0,0 +1,2 @@
+Fix escaping HTML in ``tags`` popover.
+[petschki]
diff --git a/plone/app/content/browser/contents/templates/tags.pt b/plone/app/content/browser/contents/templates/tags.pt
@@ -7,7 +7,7 @@
         _.each(item.Subject, function(tag) {
           if(tags.indexOf(tag) === -1){
             tags.push(tag);
-            %><option value="<%= tag %>"><%= tag %></option>
+            %><option value="<%- tag %>"><%- tag %></option>
             <%
           }
         });
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		Fix escaping HTML in ``tags`` popover.
		[petschki]