From 964e6f0cb1143ac3e757c3fb5470962119ea4da6 Mon Sep 17 00:00:00 2001 From: Francis Lachapelle Date: Tue, 12 May 2020 11:14:30 -0400 Subject: [PATCH] fix(mail(js)): encode HTML entities when computing height of textarea Fixes #5020 --- UI/WebServerResources/js/Common/sgAutogrow.directive.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/UI/WebServerResources/js/Common/sgAutogrow.directive.js b/UI/WebServerResources/js/Common/sgAutogrow.directive.js index 1daf07f40..760be1449 100644 --- a/UI/WebServerResources/js/Common/sgAutogrow.directive.js +++ b/UI/WebServerResources/js/Common/sgAutogrow.directive.js @@ -44,7 +44,7 @@ function AutoGrowTextArea() { $timeout(function() { - content = textarea.value; + content = textarea.value.encodeEntities(); content = content.replace(/\n/g, '
'); hiddenDiv.innerHTML = content + '
'; hiddenDiv.style.visibility = 'hidden';