From 24ec882f45b86f824545ceb4a7e4b510c35bc5d0 Mon Sep 17 00:00:00 2001
From: Aditya Toshniwal <aditya.toshniwal@enterprisedb.com>
Date: Fri, 28 Jun 2019 08:17:04 -0400
Subject: [PATCH] Properly escape dragged node text. Fixes #4139

---
 web/pgadmin/static/js/tree/tree.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/pgadmin/static/js/tree/tree.js b/web/pgadmin/static/js/tree/tree.js
index 99397ef4c..7e8ba3208 100644
--- a/web/pgadmin/static/js/tree/tree.js
+++ b/web/pgadmin/static/js/tree/tree.js
@@ -168,7 +168,7 @@ export class Tree {
           if(origEvent.dataTransfer.setDragImage) {
             let dragItem = $(`
               <div class="drag-tree-node">
-                <span>${dropDetails.text}</span>
+                <span>${_.escape(dropDetails.text)}</span>
               </div>`
             );