fix: remove special chars (#1716)

2024-01-23 18:29:59 +08:00
parent d0b62eabe9
commit de53b64880
1 changed files with 3 additions and 0 deletions
--- a/admin/write-js.php
+++ b/admin/write-js.php
@@ -79,6 +79,9 @@ $(document).ready(function() {
            prePopulate     :   tagsPre,

            onResult        :   function (result, query, val) {
+                // remove special chars
+                val = val.replace(/<|>|&|"|'/g, '');
+
                if (!query) {
                    return result;
                }