fix - xss security on tutor dropdown select

themeum · Aug 28, 2023 · d156d6f · d156d6f
1 parent c85fc65
commit d156d6f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/assets/react/front/_select_dd_search.js b/assets/react/front/_select_dd_search.js
@@ -143,7 +143,7 @@ window.selectSearchField = (selectElement) => {
 		Array.from(options).forEach((item) => {
 			optionsList += `
             <div class="tutor-form-select-option">
-				<span tutor-dropdown-item data-key="${item.value}" class="tutor-nowrap-ellipsis" title="${item.text}">${item.text}</span>
+				<span tutor-dropdown-item data-key="${item.value}" class="tutor-nowrap-ellipsis" title="${tutor_esc_html(item.text)}">${tutor_esc_html(item.text)}</span>
             </div>
             `;
 		});