Merge pull request getredash#253 from washort/entity-escape-222

convert angle brackets in strings to html entities (re getredash#222)
jezdez · Sep 11, 2017 · 9c6eb4b · 9c6eb4b
2 parents 3753fd2 + c072990
commit 9c6eb4b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/client/app/visualizations/table/index.js b/client/app/visualizations/table/index.js
@@ -29,7 +29,8 @@ function formatValue($filter, clientConfig, value, type) {
       break;
     default:
       if (isString(value)) {
-        formattedValue = $filter('linkify')(value);
+        formattedValue = $filter('linkify')(value.replace(
+            /[\u00A0-\u9999<>&'"]/gim, i => `&#${i.charCodeAt(0)};`));
       }
       break;
   }