Sanitize HTML tags in wiki page names (#33820).

git-svn-id: http://svn.redmine.org/redmine/trunk@20829 e93f8b46-1217-0410-a6f0-8f06a7374b81
2025-11-11 07:46:02 +01:00 · 2021-03-19 04:42:43 +00:00
parent bbfade9728
commit a18b8397ff
1 changed files with 3 additions and 0 deletions
--- a/public/javascripts/application.js
+++ b/public/javascripts/application.js
@@ -1187,6 +1187,9 @@ function inlineAutoComplete(element) {
          selectTemplate: function (wikiPage) {
            return '[[' + wikiPage.original.value + ']]';
          },
+          menuItemTemplate: function (wikiPage) {
+            return sanitizeHTML(wikiPage.original.label);
+          },
          noMatchTemplate: function () {
            return '<span style:"visibility: hidden;"></span>';
          }