correctly encode html characters inside descriptions

diff --git a/data/PVEAPI.js b/data/PVEAPI.js
index 0ce315bddb88be9e7a77ef53d9ae7c814c963e5c..64586a46a70cfa097ba5d58cdbeeb5899e0f5c55 100644 (file)
--- a/data/PVEAPI.js
+++ b/data/PVEAPI.js
@@ -53,7 +53,7 @@ Ext.onReady(function() {
 
        metaData.style = 'white-space:pre-wrap;'
 
-       return  value;
+       return Ext.htmlEncode(value);
     };
 
     var render_type = function(value, metaData, record) {
@@ -96,7 +96,7 @@ Ext.onReady(function() {
                var sections = [
                    {
                        title: 'Description',
-                       html: info.description,
+                       html: Ext.htmlEncode(info.description),
                        bodyPadding: 10
                    }
                ];