From ca9426308db4bf8843702dde145f6e8a9e10d583 Mon Sep 17 00:00:00 2001
From: Arthur Schiwon <blizzz@owncloud.com>
Date: Thu, 9 Apr 2015 14:49:11 +0200
Subject: [PATCH] escape filter for output

---
 apps/user_ldap/js/wizard/wizardTabLoginFilter.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/user_ldap/js/wizard/wizardTabLoginFilter.js b/apps/user_ldap/js/wizard/wizardTabLoginFilter.js
index 3acb13ace21..5e9f0728b0e 100644
--- a/apps/user_ldap/js/wizard/wizardTabLoginFilter.js
+++ b/apps/user_ldap/js/wizard/wizardTabLoginFilter.js
@@ -140,7 +140,7 @@ OCA = OCA || {};
 			if(result.status === 'success') {
 				var usersFound = parseInt(result.changes.ldap_test_loginname, 10);
 				if(usersFound < 1) {
-					var filter = result.changes.ldap_test_effective_filter;
+					var filter = $('<p>').text(result.changes.ldap_test_effective_filter).html();
 					message = t('user_ldap', 'User not found. Please check your login attributes and username. Effective filter (to copy-and-paste for command line validation): <br/>' + filter);
 					console.warn(filter);
 					isHtml = true;
-- 
2.39.5