From f0fd80a2949b73b9bac2c2bfa05bc48558631dd0 Mon Sep 17 00:00:00 2001 From: Waseem Daher Date: Wed, 31 Oct 2012 17:49:19 -0400 Subject: [PATCH] Interim measure: Escape fullnames as well. I'm sure this problem exists in a latent way with stream names and email addresses as well. Once I figure out a general way to fix this, I'd like to go back and handle these three cases in a cleaner, symmetric way, but this'll do for now. (imported from commit a634e6ac39ea337be499889b3ff64b3c4f4fcccb) --- zephyr/static/js/ui.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/zephyr/static/js/ui.js b/zephyr/static/js/ui.js index f2af94eb7f..d12d1dc337 100644 --- a/zephyr/static/js/ui.js +++ b/zephyr/static/js/ui.js @@ -123,7 +123,7 @@ function update_autocomplete() { }); var huddle_typeahead_list = $.map(people_list, function (person) { - return person.full_name + " <" + person.email + ">"; + return Handlebars.Utils.escapeExpression(person.full_name) + " <" + person.email + ">"; }); // We need to muck with the internal state of Typeahead in order to update