diff options
Diffstat (limited to 'addons/web_editor')
| -rw-r--r-- | addons/web_editor/static/src/js/wysiwyg/widgets/link_dialog.js | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/addons/web_editor/static/src/js/wysiwyg/widgets/link_dialog.js b/addons/web_editor/static/src/js/wysiwyg/widgets/link_dialog.js index cf2fa9dd04a..2a18ba2b436 100644 --- a/addons/web_editor/static/src/js/wysiwyg/widgets/link_dialog.js +++ b/addons/web_editor/static/src/js/wysiwyg/widgets/link_dialog.js @@ -261,11 +261,11 @@ var LinkDialog = Dialog.extend({ _getData: function () { var $url = this.$('input[name="url"]'); var url = $url.val(); - var label = this.$('input[name="label"]').val() || url; + var label = _.escape(this.$('input[name="label"]').val() || url); if (label && this.data.images) { for (var i = 0; i < this.data.images.length; i++) { - label = label.replace('<', "<").replace('>', ">").replace(/\[IMG\]/, this.data.images[i].outerHTML); + label = label.replace(/\[IMG\]/, this.data.images[i].outerHTML); } } |