diff options
| -rw-r--r-- | core/js/sharedialogview.js | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/core/js/sharedialogview.js b/core/js/sharedialogview.js index a433570b13d..eabcf2f3b24 100644 --- a/core/js/sharedialogview.js +++ b/core/js/sharedialogview.js @@ -477,7 +477,7 @@ autocompleteRenderItem: function(ul, item) { var icon = 'icon-user'; - var text = item.label; + var text = escapeHTML(item.label); var description = ''; var type = ''; var getTranslatedType = function(type) { @@ -497,7 +497,7 @@ } if (typeof item.name !== 'undefined') { - text = item.name; + text = escapeHTML(item.name); } if (item.value.shareType === OC.Share.SHARE_TYPE_GROUP) { icon = 'icon-contacts-dark'; |