escape html from username

This commit is contained in:
isymchych 2015-11-04 17:01:11 +02:00
parent 67b35f0f1e
commit fdc2ecd86f
1 changed files with 2 additions and 0 deletions

View File

@ -130,6 +130,8 @@ LocalVideo.prototype.setDisplayName = function(displayName, key) {
};
LocalVideo.prototype.inputDisplayNameHandler = function (name) {
name = UIUtil.escapeHtml(name);
NicknameHandler.setNickname(name);
var localDisplayName = $('#localDisplayName');