add escape html for description

mailcow · Sep 13, 2024 · 3c29af6 · 3c29af6
1 parent 59b6655
commit 3c29af6
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/data/web/js/site/user.js b/data/web/js/site/user.js
@@ -205,7 +205,10 @@ jQuery(function($){
         {
           title: lang.description,
           data: 'description',
-          defaultContent: ''
+          defaultContent: '',
+          render: function (data, type) {
+            return escapeHtml(data);
+          }
         },
         {
           title: lang.alias_valid_until,