From 7e571d8ec98bd8e0e639e54a477c6b1717aa60c5 Mon Sep 17 00:00:00 2001
From: Michael Abashian <mabashian@ansible.com>
Date: Thu, 8 Dec 2016 11:42:24 -0500
Subject: [PATCH] Sanitize JT info popover strings before rending to avoid any
 monkeys being unnecessarily punched.

---
 awx/ui/client/src/partials/job-template-details.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/awx/ui/client/src/partials/job-template-details.html b/awx/ui/client/src/partials/job-template-details.html
index 0f23f741c6..855d22b444 100644
--- a/awx/ui/client/src/partials/job-template-details.html
+++ b/awx/ui/client/src/partials/job-template-details.html
@@ -1,3 +1,3 @@
 <div class="List-infoCell">
-    <a aw-pop-over="<div>INVENTORY: {{job_template.summary_fields.inventory.name || 'NONE SELECTED'}}</div><div>PROJECT: {{job_template.summary_fields.project.name}}</div><div>PLAYBOOK: {{job_template.playbook}}</div><div>CREDENTIAL: {{job_template.summary_fields.credential.name || 'NONE SELECTED'}}</div>" data-popover-title="{{job_template.name}}">INFO</a>
+    <a aw-pop-over="<div>INVENTORY: {{(job_template.summary_fields.inventory.name | sanitize) || 'NONE SELECTED'}}</div><div>PROJECT: {{job_template.summary_fields.project.name | sanitize}}</div><div>PLAYBOOK: {{job_template.playbook| sanitize}}</div><div>CREDENTIAL: {{(job_template.summary_fields.credential.name | sanitize) || 'NONE SELECTED'}}</div>" data-popover-title="{{job_template.name| sanitize}}">INFO</a>
 </div>