diff --git a/content/src/content/jcr_root/apps/core/wcm/components/list/v1/list/clientlibs/editor/js/list.js b/content/src/content/jcr_root/apps/core/wcm/components/list/v1/list/clientlibs/editor/js/list.js
index 8f3fdfc51c..c4b56e2b25 100644
--- a/content/src/content/jcr_root/apps/core/wcm/components/list/v1/list/clientlibs/editor/js/list.js
+++ b/content/src/content/jcr_root/apps/core/wcm/components/list/v1/list/clientlibs/editor/js/list.js
@@ -18,7 +18,7 @@
 
     $(document).on("foundation-contentloaded", function(e) {
         $(".cmp-list--editor coral-select.cq-dialog-dropdown-showhide", e.target).each(function(i, element) {
-            var target = $(element).data("cqDialogDropdownShowhideTarget");
+            var target = window.Granite.UI.Foundation.Utils.sanitizeHtml($(element).data("cqDialogDropdownShowhideTarget"));
             if (target) {
                 Coral.commons.ready(element, function(component) {
                     showHide(component, target);
diff --git a/content/src/content/jcr_root/apps/core/wcm/components/list/v2/list/clientlibs/editor/js/list.js b/content/src/content/jcr_root/apps/core/wcm/components/list/v2/list/clientlibs/editor/js/list.js
index 0bd2500263..4fd8113da7 100644
--- a/content/src/content/jcr_root/apps/core/wcm/components/list/v2/list/clientlibs/editor/js/list.js
+++ b/content/src/content/jcr_root/apps/core/wcm/components/list/v2/list/clientlibs/editor/js/list.js
@@ -18,7 +18,7 @@
 
     $(document).on("foundation-contentloaded", function(e) {
         $(".cmp-list__editor coral-select.cq-dialog-dropdown-showhide", e.target).each(function(i, element) {
-            var target = $(element).data("cqDialogDropdownShowhideTarget");
+            var target = window.Granite.UI.Foundation.Utils.sanitizeHtml($(element).data("cqDialogDropdownShowhideTarget"));
             if (target) {
                 Coral.commons.ready(element, function(component) {
                     showHide(component, target);