From: Aleksander Łukasz <aleksander.lukasz@nowoczesnapolska.org.pl>
Date: Tue, 16 Jul 2013 09:51:42 +0000 (+0200)
Subject: Fix: escaping html in familyTree properly
X-Git-Url: https://git.mdrn.pl/fnpeditor.git/commitdiff_plain/f17e9178a91a7df96fd252f66e058e880eac8932?hp=faae581f8b54b9cd3000d3060c446ed7dfe13447

Fix: escaping html in familyTree properly
---

diff --git a/modules/nodeFamilyTree/nodeFamilyTree.js b/modules/nodeFamilyTree/nodeFamilyTree.js
index af5d4d7..0825506 100644
--- a/modules/nodeFamilyTree/nodeFamilyTree.js
+++ b/modules/nodeFamilyTree/nodeFamilyTree.js
@@ -49,14 +49,14 @@ return function(sandbox) {
                 if(child.getText) {
                     var text = child.getText();
                     if(!text)
-                        text = '&lt;pusty tekst&gt;';
+                        text = '<pusty tekst>';
                     else {
                         if(text.length > 13) {
                             text = text.substr(0,13) + '...';
                         }
                         text = '"' + text + '"';
                     }
-                    children.push({repr: text, bold: child.sameNode(textElement)});
+                    children.push({repr: _.escape(text), bold: child.sameNode(textElement)});
                 } else {
                     children.push({repr: child.getWlxmlTag() + (child.getWlxmlClass() ? ' / ' + child.getWlxmlClass() : '')});
                 }