UX: escape category title (#27)

discourse · Dec 6, 2023 · 68e6629 · 68e6629
1 parent 2b483df
commit 68e6629
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/javascripts/discourse/initializers/category-icons.js b/javascripts/discourse/initializers/category-icons.js
@@ -63,7 +63,9 @@ export default {
 
       function categoryIconsRenderer(category, opts) {
         let siteSettings = helperContext().siteSettings;
-        let descriptionText = get(category, "description_text");
+        let descriptionText = escapeExpression(
+          get(category, "description_text")
+        );
         let restricted = get(category, "read_restricted");
         let url = opts.url
           ? opts.url