Escape HTML when showing tags in @@fc-tags

plone · Feb 12, 2024 · e6bf43a · e6bf43a
1 parent 3fa0d14
commit e6bf43a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/plone/app/content/browser/contents/templates/tags.pt b/plone/app/content/browser/contents/templates/tags.pt
@@ -7,7 +7,7 @@
         _.each(item.Subject, function(tag) {
           if(tags.indexOf(tag) === -1){
             tags.push(tag);
-            %><option value="<%= tag %>"><%= tag %></option>
+            %><option value="<%- tag %>"><%- tag %></option>
             <%
           }
         });