Properly escape dragged node text. Fixes #4139

2019-06-28 08:17:04 -04:00 · 2019-06-28 08:17:04 -04:00 · 24ec882f45
parent d397959f6a
commit 24ec882f45
1 changed files with 1 additions and 1 deletions
--- a/web/pgadmin/static/js/tree/tree.js
+++ b/web/pgadmin/static/js/tree/tree.js
@ -168,7 +168,7 @@ export class Tree {
          if(origEvent.dataTransfer.setDragImage) {
            let dragItem = $(`
              <div class="drag-tree-node">
-                <span>${dropDetails.text}</span>
+                <span>${_.escape(dropDetails.text)}</span>
              </div>`
            );