From 5c8a19ba26977a238115415882323fd159ac21b7 Mon Sep 17 00:00:00 2001
From: Ralf Becker <RalfBecker@outdoor-training.de>
Date: Fri, 1 Nov 2019 11:40:44 +0100
Subject: [PATCH] correctly encode success message

---
 api/js/etemplate/et2_widget_dialog.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/api/js/etemplate/et2_widget_dialog.js b/api/js/etemplate/et2_widget_dialog.js
index 6d1c370750..b7af0f6e6c 100644
--- a/api/js/etemplate/et2_widget_dialog.js
+++ b/api/js/etemplate/et2_widget_dialog.js
@@ -830,7 +830,9 @@ jQuery.extend(et2_dialog, //(function(){ "use strict"; return
 					if(response)
 					{
 						totals.success++;
-						log.append("<div class='message'>"+response+"</div>");
+						jQuery("<div class='message'></div>")
+							.text(response)
+							.appendTo(log);
 					}
 			}
 			// Scroll to bottom