Display needs to be escaped

This commit is contained in:
Thomas Müller 2018-03-05 20:16:39 +01:00 committed by Hendrik Leppelsack
parent 73163d22c4
commit 7bffc33dbe
1 changed files with 2 additions and 2 deletions

View File

@ -130,7 +130,7 @@ angular.module('contactsApp')
// Combine users and groups
users = users.map(function(item) {
return {
display: item.value.shareWith,
display: _.escape(item.value.shareWith),
type: OC.Share.SHARE_TYPE_USER,
identifier: item.value.shareWith
};
@ -138,7 +138,7 @@ angular.module('contactsApp')
groups = groups.map(function(item) {
return {
display: item.value.shareWith + ' (group)',
display: _.escape(item.value.shareWith) + ' (group)',
type: OC.Share.SHARE_TYPE_GROUP,
identifier: item.value.shareWith
};