Merge pull request #2254 from adunkman/fix-xss-vulnerabilities

Fix code execution vulnerabilities.
harvesthq · Mar 3, 2015 · 717d3af · 717d3af
2 parents 501568a + bfe3ea1
commit 717d3af
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/coffee/lib/abstract-chosen.coffee b/coffee/lib/abstract-chosen.coffee
@@ -77,7 +77,7 @@ class AbstractChosen
         if data.selected and @is_multiple
           this.choice_build data
         else if data.selected and not @is_multiple
-          this.single_set_selected_text(data.text)
+          this.single_set_selected_text(data.html)
 
     content
 
@@ -167,7 +167,7 @@ class AbstractChosen
 
         unless option.group and not @group_search
 
-          option.search_text = if option.group then option.label else option.text
+          option.search_text = if option.group then option.label else option.html
           option.search_match = this.search_string_match(option.search_text, regex)
           results += 1 if option.search_match and not option.group