add escape html for description

mailcow · Aug 15, 2024 · 23e7032 · 23e7032
1 parent d5d043c
commit 23e7032
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/data/web/js/site/user.js b/data/web/js/site/user.js
@@ -205,7 +205,10 @@ jQuery(function($){
         {
           title: lang.description,
           data: 'description',
-          defaultContent: ''
+          defaultContent: '',
+          render: function (data, type) {
+            return escapeHtml(data);
+          }
         },
         {
           title: lang.alias_valid_until,