Commit 7d199b7f authored by Jacob Schatz's avatar Jacob Schatz

Merge branch 'escape-label-title' into 'master'

Correctly escapes label title in filters

Fixes #15522

See merge request !3880
parents 10aaea1c 83adcf19
......@@ -223,7 +223,7 @@ class @LabelsSelect
fieldName: $dropdown.data('field-name')
id: (label) ->
if $dropdown.hasClass("js-filter-submit") and not label.isAny?
label.title
_.escape label.title
else
label.id
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment