Merge "Do not embed unsafe content"

2016-09-14 04:26:31 +00:00
parent 45dedbbebc c4ddce4a50
commit cb81c309fb
1 changed files with 2 additions and 2 deletions
--- a/horizon/static/framework/widgets/property/hz-field.directive.js
+++ b/horizon/static/framework/widgets/property/hz-field.directive.js
@@ -131,9 +131,9 @@
        }

        if (url) {
-          element.append(angular.element('<a>').attr('href', url).append(output));
+          element.append(angular.element('<a>').attr('href', url).text(output));
        } else {
-          element.append(output);
+          element.text(output);
        }
      }
    }