From 4fd718254da192a819a659a6ff544238d1314b44 Mon Sep 17 00:00:00 2001
From: ansuz <ansuz@transitiontech.ca>
Date: Thu, 7 Jul 2016 14:52:00 +0200
Subject: [PATCH] fix one more bug for people trying to put html in titles

---
 customize.dist/main.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/customize.dist/main.js b/customize.dist/main.js
index e53dd66e4..fb08a6758 100644
--- a/customize.dist/main.js
+++ b/customize.dist/main.js
@@ -33,6 +33,10 @@ define([
     var recentPads = Cryptpad.getRecentPads();
     recentPads.sort(Cryptpad.mostRecent);
 
+    var fixHTML = function (html) {
+        return html.replace(/</g, '&lt;');
+    };
+
     var makeRecentPadsTable = function () {
         if (!recentPads.length) { return; }
         recentPads.some(function (pad, index) {
@@ -71,7 +75,7 @@ define([
                 'class': 'remove',
                 title: "forget '"+shortTitle + "'"
             }).text('✖').click(function () {
-                Cryptpad.confirm("Are you sure you'd like to forget this pad (" + shortTitle + ")?", function (yes) {
+                Cryptpad.confirm(fixHTML("Are you sure you'd like to forget this pad (" + shortTitle + ")?"), function (yes) {
                     if (!yes) { return; }
                     forgetPad(pad.href);
                     $row.fadeOut(750, function () {