Merge branch 'MDL-61359-master' of git://github.com/mickhawkins/moodle

2018-07-09 12:10:33 +08:00
parent c7d148dc20 6924e32e4a
commit 545a1382aa
2 changed files with 3 additions and 5 deletions
@@ -553,15 +553,13 @@ define(['jquery', 'core/ajax', 'core/templates', 'core/notification', 'core/cust
         * @return {String} The altered text
         */
        Contacts.prototype._getContactText = function(text) {
-            // Remove the HTML tags to render the contact text.
-            text = $(document.createElement('div')).html(text).text();
-
            if (text.length > this._messageLength) {
                text = text.substr(0, this._messageLength - 3);
                text += '...';
            }

-            return text;
+            // Text node prevents script injection through HTML entities.
+            return document.createTextNode(text);
        };

        /**