Merge pull request kobotoolbox#2107 from kobotoolbox/683-do-not-strip

Do not strip HTML from labels in Form Builder
qedsoftware · Dec 8, 2018 · ccd0689 · ccd0689
2 parents 2f056a3 + 232ea08
commit ccd0689
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/jsapp/xlform/src/view.row.coffee b/jsapp/xlform/src/view.row.coffee
@@ -197,7 +197,7 @@ module.exports = do ->
         if value == ''
           return newValue: new Array(10).join('&nbsp;')
         else
-        return newValue: value;
+          return newValue: value;
 
   class RowView extends BaseRowView
     _expandedRender: ->

diff --git a/jsapp/xlform/src/view.utils.coffee b/jsapp/xlform/src/view.utils.coffee
@@ -62,7 +62,7 @@ module.exports = do ->
         if new_value.newValue?
           edit_box.remove()
           selector.show()
-          selector.html new_value.newValue
+          selector.html(_.escape(new_value.newValue))
         else
           error_box = $('<div class="error-message">' + new_value + '</div>')
           parent_element.append(error_box)