esc the note body

mozilla · Nov 24, 2014 · 144d07b · 144d07b
1 parent bdce26b
commit 144d07b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/media/js/devreg/reviewers/reviewers_commbadge.js b/media/js/devreg/reviewers/reviewers_commbadge.js
@@ -58,7 +58,7 @@ define('reviewersCommbadge', ['login'], function(login) {
             // Append notes to table.
             $('tbody', $table).append(noteTemplate({
                 attachments: note.attachments,
-                body: note.body,
+                body: escape_(note.body),
                 // L10n: {0} is author of note, {1} is a datetime. (e.g., "by Kevin on Feburary 18th 2014 12:12 pm").
                 metadata: format(gettext('By {0} on {1}'),
                                  [author, created]),