fix: form dropdown, escape autocomplete dropdown items, fixes #9089

2025-02-25 18:55:37 -06:00 · 2017-08-28 11:00:42 +02:00
parent e91cf28f8d
commit bf110d02d1
2 changed files with 4 additions and 2 deletions
--- a/public/app/core/components/form_dropdown/form_dropdown.ts
+++ b/public/app/core/components/form_dropdown/form_dropdown.ts
@@ -115,7 +115,9 @@ export class FormDropdownCtrl {
      this.optionCache = options;

      // extract texts
-      let optionTexts = _.map(options, 'text');
+      let optionTexts = _.map(options, op => {
+        return _.escape(op.text);
+      });

      // add custom values
      if (this.allowCustom) {