From 72b24761b26336d39e577da67bcee88cafe3a837 Mon Sep 17 00:00:00 2001
From: rahuljain-dev <rahul.jain@contractors.onbase.com>
Date: Wed, 8 May 2024 07:41:57 +0530
Subject: [PATCH] ELEMENTS-1740: HTML Escape Add to Collection label

---
 ui/actions/nuxeo-add-to-collection-button.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ui/actions/nuxeo-add-to-collection-button.js b/ui/actions/nuxeo-add-to-collection-button.js
index ce48e6d5e..072f1cb17 100644
--- a/ui/actions/nuxeo-add-to-collection-button.js
+++ b/ui/actions/nuxeo-add-to-collection-button.js
@@ -255,7 +255,7 @@ import '../nuxeo-button-styles.js';
     }
 
     _newEntryFormatter(term) {
-      return { id: -1, displayLabel: term };
+      return { id: -1, displayLabel: escapeHTML(term) };
     }
 
     _isValid() {