escape html from username

2015-11-04 17:01:11 +02:00
parent 67b35f0f1e
commit fdc2ecd86f
1 changed files with 2 additions and 0 deletions
--- a/modules/UI/videolayout/LocalVideo.js
+++ b/modules/UI/videolayout/LocalVideo.js
@@ -130,6 +130,8 @@ LocalVideo.prototype.setDisplayName = function(displayName, key) {
 };

 LocalVideo.prototype.inputDisplayNameHandler = function (name) {
+    name = UIUtil.escapeHtml(name);
+
    NicknameHandler.setNickname(name);

    var localDisplayName = $('#localDisplayName');