From 86e6cebc18b63162b92f94d7b37e33f5f9c68175 Mon Sep 17 00:00:00 2001
From: Joas Schilling <coding@schilljs.com>
Date: Mon, 14 Jan 2019 14:09:12 +0100
Subject: [PATCH] Correctly handle displaynames returned from the sharee API

Signed-off-by: Joas Schilling <coding@schilljs.com>
---
 core/js/sharedialogview.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/core/js/sharedialogview.js b/core/js/sharedialogview.js
index a433570b13..eabcf2f3b2 100644
--- a/core/js/sharedialogview.js
+++ b/core/js/sharedialogview.js
@@ -477,7 +477,7 @@
 
 		autocompleteRenderItem: function(ul, item) {
 			var icon = 'icon-user';
-			var text = item.label;
+			var text = escapeHTML(item.label);
 			var description = '';
 			var type = '';
 			var getTranslatedType = function(type) {
@@ -497,7 +497,7 @@
 			}
 
 			if (typeof item.name !== 'undefined') {
-				text = item.name;
+				text = escapeHTML(item.name);
 			}
 			if (item.value.shareType === OC.Share.SHARE_TYPE_GROUP) {
 				icon = 'icon-contacts-dark';