FIX: escape category description text (#24724)

2023-12-05 15:48:13 -05:00 · 2023-12-05 15:48:13 -05:00 · b65f281842
parent d4c02d738b
commit b65f281842
1 changed files with 1 additions and 1 deletions
--- a/app/assets/javascripts/discourse/app/helpers/category-link.js
+++ b/app/assets/javascripts/discourse/app/helpers/category-link.js
@ -103,7 +103,7 @@ function buildTopicCount(count) {
 }

 export function defaultCategoryLinkRenderer(category, opts) {
-  let descriptionText = get(category, "description_text");
+  let descriptionText = escapeExpression(get(category, "description_text"));
  let restricted = get(category, "read_restricted");
  let url = opts.url
    ? opts.url