fixes #533

jappix · Mar 17, 2015 · 07dc1be · 07dc1be
1 parent 657694d
commit 07dc1be
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/app/javascripts/dataform.js b/app/javascripts/dataform.js
@@ -591,8 +591,8 @@ var DataForm = (function () {
                                     '<div class="avatar-container">' +
                                         '<img class="avatar" src="' + './images/others/default-avatar.png' + '" alt="" />' +
                                     '</div>' +
-                                    '<div class="one-fn">' + bName + '</div>' +
-                                    '<div class="one-ctry">' + bCountry + '</div>' +
+                                    '<div class="one-fn">' + Common.htmlentities(bName) + '</div>' +
+                                    '<div class="one-ctry">' + Common.htmlentities(bCountry) + '</div>' +
                                     '<div class="one-jid">' + bXID + '</div>' +
                                     '<div class="buttons-container">';
 
@@ -1197,4 +1197,4 @@ var DataForm = (function () {
      */
     return self;
 
-})();
+})();