fix: escape search snippet closes #7506

NodeBB · Mar 30, 2019 · e906bea · e906bea
1 parent cf180e0
commit e906bea
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/public/src/app.js b/public/src/app.js
@@ -596,7 +596,7 @@ app.cacheBuster = null;
 							return;
 						}
 						data.posts.forEach(function (p) {
-							p.snippet = $(p.content).text().slice(0, 80) + '...';
+							p.snippet = utils.escapeHTML($(p.content).text().slice(0, 80) + '...');
 						});
 						app.parseAndTranslate(template, data, function (html) {
 							html.find('.timeago').timeago();