From 89f8c87cd1c5620a5230b703744dd1d902cf6c8a Mon Sep 17 00:00:00 2001
From: Ralf Becker <ralfbecker@outdoor-training.de>
Date: Fri, 21 Nov 2014 11:18:58 +0000
Subject: [PATCH] dont allow to insert html

---
 etemplate/js/et2_widget_groupbox.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etemplate/js/et2_widget_groupbox.js b/etemplate/js/et2_widget_groupbox.js
index 3683b0436a..923cc77bc0 100644
--- a/etemplate/js/et2_widget_groupbox.js
+++ b/etemplate/js/et2_widget_groupbox.js
@@ -59,7 +59,7 @@ var et2_groupbox_legend = et2_baseWidget.extend(
 	init: function() {
 		this._super.apply(this, arguments);
 
-		var legend = jQuery("<legend>"+this.options.label+"</legend>");
+		var legend = jQuery(document.createElement("legend")).text(this.options.label);
 		this.setDOMNode(legend[0]);
 	}
 });