Revision 2757bf81

View differences:

src/sunstone/public/app/utils/labels/utils.js
294 294
  }
295 295

  
296 296
  function _labelsStr(elementTemplate) {
297
    return elementTemplate[LABELS_ATTR];
297
    return TemplateUtils.htmlEncode( elementTemplate[LABELS_ATTR] );
298 298
  }
299 299

  
300 300
  function _deserializeLabels(labelsStr) {
......
335 335
  function _makeSubTree(parentName, folderName, childs, currentLabel) {
336 336
    var fullName = parentName + folderName;
337 337
    var htmlStr =
338
      '<span class="secondary one-label" title="' + TemplateUtils.htmlEncode(fullName) + '" one-label-full-name="' + TemplateUtils.htmlEncode(fullName) + '">' +
339
        TemplateUtils.htmlEncode(folderName) +
338
      '<span class="secondary one-label" title="' + fullName + '" one-label-full-name="' + fullName + '">' +
339
        folderName +
340 340
      '</span>';
341 341

  
342 342
    var tree = {

Also available in: Unified diff