From 93738d1656c1601e23def93e04a0dc2e14251eaf Mon Sep 17 00:00:00 2001 From: Damien Elmes Date: Sun, 10 Dec 2023 12:46:25 +1000 Subject: [PATCH] Don't allow HTML in Select fields If there's somewhere where we do need it, we should make it opt-in, as stripping is the safe default. Closes #2883 --- ts/components/Select.svelte | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ts/components/Select.svelte b/ts/components/Select.svelte index ec10ec752..50facef95 100644 --- a/ts/components/Select.svelte +++ b/ts/components/Select.svelte @@ -218,7 +218,7 @@ License: GNU AGPL, version 3 or later; http://www.gnu.org/licenses/agpl.html use:asReference >
-
{@html label}
+
{label}