fix(front): escape event.title when it's passed to dialog component HTML message
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
This commit is contained in:
parent
83eb5c6a69
commit
f4ee116112
|
@ -346,6 +346,7 @@ import { Dialog } from "@/plugins/dialog";
|
|||
import { Snackbar } from "@/plugins/snackbar";
|
||||
import { useDeleteEvent } from "@/composition/apollo/event";
|
||||
import Tag from "@/components/TagElement.vue";
|
||||
import { escapeHtml } from "@/utils/html";
|
||||
import Bullhorn from "vue-material-design-icons/Bullhorn.vue";
|
||||
|
||||
const props = defineProps<{
|
||||
|
@ -388,7 +389,7 @@ const openDeleteEventModal = (
|
|||
)}
|
||||
<br><br>
|
||||
${t('To confirm, type your event title "{eventTitle}"', {
|
||||
eventTitle: event.title,
|
||||
eventTitle: escapeHtml(event.title),
|
||||
})}`,
|
||||
confirmText: t("Delete {eventTitle}", {
|
||||
eventTitle: event.title,
|
||||
|
|
Loading…
Reference in a new issue