1
0
mirror of synced 2024-11-26 23:06:02 +03:00

call escape markup on results

This commit is contained in:
Igor Vaynberg 2013-02-05 15:15:58 -08:00
parent c90bfc3e22
commit e78dc69a6b

View File

@ -698,7 +698,7 @@ the specific language governing permissions and limitations under the Apache Lic
label=$(document.createElement("div"));
label.addClass("select2-result-label");
formatted=opts.formatResult(result, label, query);
formatted=opts.escapeMarkup(opts.formatResult(result, label, query));
if (formatted!==undefined) {
label.html(formatted);
}