michael#171 HTML encode <li> element attributes and content

lawrence-ofsystems · Feb 2, 2020 · ebcc76f · ebcc76f
1 parent 71eda5f
commit ebcc76f
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/js/ui.multiselect.js b/js/ui.multiselect.js
@@ -163,7 +163,14 @@ $.widget("ui.multiselect", {
 	},
 	_getOptionNode: function(option) {
 		option = $(option);
-		var node = $('<li class="ui-state-default ui-element" title="'+option.text()+'" data-selected-value="' + option.val() + '"><span class="ui-icon"/>'+option.text()+'<a href="#" class="action"><span class="ui-corner-all ui-icon"/></a></li>').hide();
+		var node = $('<li>',
+			{
+				class: 'ui-state-default ui-element',
+				title: option.text(),
+				'data-selected-value': option.val()
+			})
+			.append('<span class="ui-icon"/>'+option.html()+'<a href="#" class="action"><span class="ui-corner-all ui-icon"/></a></li>')
+			.hide();
 		node.data('optionLink', option);
 		return node;
 	},