Replace JQuery .text by .html

- Prevents inserting unescaped HTML in page
2020-11-16 18:16:20 -05:00
parent ba0d3b2435
commit b2c4116357
12 changed files with 20 additions and 19 deletions
--- a/view/theme/frio/js/event_edit.js
+++ b/view/theme/frio/js/event_edit.js
@@ -23,7 +23,7 @@ $(document).ready(function() {
 	$('#contact_allow, #contact_deny, #group_allow, #group_deny').change(function() {
 		var selstr;
 		$('#contact_allow option:selected, #contact_deny option:selected, #group_allow option:selected, #group_deny option:selected').each( function() {
-			selstr = $(this).text();
+			selstr = $(this).html();
 			$('#jot-public').hide();
 		});
 		if (selstr == null) {