Commit 16dd4d5af3505c8150ee7f25fffa4cdd0065e24d

Authored by OpenWapp Developer
1 parent 432901bf1c

Escaping message text before expanding

Showing 1 changed file with 1 additions and 0 deletions

app/scripts/templates/helpers.js View file @ 16dd4d5
... ... @@ -107,6 +107,7 @@
107 107 _scheme: /(^|[^\/])(www\.[\S]+(\b|$))/gim,
108 108  
109 109 _expand: function (text) {
  110 + text = Handlebars.Utils.escapeExpression(text);
110 111 text = text.replace(
111 112 Helpers._protocol,
112 113 '<a href="$1" target="_blank">$1</a>'